Asset Assessment in Web Applications

Security, a quality attribute in web applications, improves the level of quality in the processes needed to manage information, and therefore achieving business objectives. Web Engineering must address new challenges facing web application development in order to offer new techniques that guarantee high quality applications. This work is part of an over all project that focuses on Risk Assessment in web application development to help organizations determine security risks in information management systems. The formal approach to identifying and evaluating information assets is explored using the EBIOS method and the MAGERIT methodology. The previous phase of this research presented a methodological tool for asset identification in web applications. This work presents a methodological tool for asset assessment. The work is carried out using a University Web Application to help the University achieve security risk assessment.