1. YASCA official website yasca.org or on Github: https://github.com/scovetta/yasca accessed July 2018. YASCA official website yasca.org or on Github: https://github.com/scovetta/yasca accessed July 2018.
2. J. Bau E. Bursztein D. Gupta and J. Mitchell "State of the art: Automated black-box web application vulnerability testing " in Proceedingsof the 2010 IEEE Symposium on Security and Privacy 2010 pp. 332--345. 10.1109/SP.2010.27 J. Bau E. Bursztein D. Gupta and J. Mitchell "State of the art: Automated black-box web application vulnerability testing " in Proceedingsof the 2010 IEEE Symposium on Security and Privacy 2010 pp. 332--345. 10.1109/SP.2010.27
3. Esposito Damiano etal "Exploiting the potential of web application vulnerability scanning." in ICIMP Proceeding of The Thirteenth International Conference on Internet Monitoring and Protection Barcelona Spain July 22--26 2018. Esposito Damiano et al. "Exploiting the potential of web application vulnerability scanning." in ICIMP Proceeding of The Thirteenth International Conference on Internet Monitoring and Protection Barcelona Spain July 22--26 2018.
4. OWASP Top 10 Most Critical Web Application Security Risks 2017. https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project. OWASP Top 10 Most Critical Web Application Security Risks 2017. https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project.
5. Symantec Internet Security Report Vol.23 2018. Symantec Internet Security Report Vol.23 2018.