Risk-Assessment-Framework / RAF-DAST-Scanner

Dast tool
8 stars 7 forks source link

ISO 27001 : Added Malware scanners #16

Closed juhiechandra closed 1 year ago

juhiechandra commented 1 year ago

ISO 27001, also known as ISO/IEC 27001, is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

Some common vulnerabilities that ISO 27001 aims to address include:

  1. Weak passwords
  2. Malware
  3. Social engineering
  4. Unauthorized access
  5. Data breaches
graph TD;
    subgraph ISO 27001
        ISO27001-->|"Weak Passwords"|OWASPTop10
        ISO27001-->|"Malware Detection"|CVE
        ISO27001-->|"Unauthorized Access"|OWASPTop10,CVE,SANSTop25
        ISO27001-->|"Data Breaches"|OWASPTop10,CVE,SANSTop25
    end

Added malware detection API which functions as:

graph TD;
    A[Client] --> B(Flask API)
    B --> C{Input Validation}
    C -->|Valid| D[Send URL to VirusTotal]
    D --> E{Check Scan Status}
    E -->|Scan Complete| F[Retrieve Scan Report]
    F --> G{Check Scan Results}
    G -->|Malware Found| H[Return Malware Results]
    G -->|No Malware Found| I[Return No Malware Results]
    C -->|Invalid| J[Return Error]

    subgraph VirusTotal
        D --> K[Scan URL]
        F --> L[Retrieve Scan Report]
    end

Issue to cover: