Automated XSS vulnerability detection in web applications based on a multi-agent approach

With the development of information technologies and the increasing volume of sensitive data processing on the Internet, web applications have become a crucial part of modern business processes. However, with this growth, the number of cyber threats also increases, posing the challenge for organizations to ensure the security of their web resources. One of the primary methods of protection is penetration testing, which allows vulnerabilities to be identified by simulating real attacks. This article explores the use of multi-agent systems (MAS) for automating the penetration testing process, specifically for detecting XSS vulnerabilities. Penetration testing is a vital step in ensuring the security of web applications, encompassing several stages: initial analysis, vulnerability identification, exploitation of vulnerabilities, and evaluating the consequences of an attack. Common vulnerabilities, such as XSS, are key targets in penetration testing because they can be easily exploited to compromise a system. However, traditional penetration testing methods often have limited ability to adapt quickly to new attacks, making them less effective.