Comprehensive Survey of Web Security Threats in 2024

Comprehensive Survey of Web Security Threats in 2024

Muni Nitish Kumar Yaddala*

Security Engineer I,

Security Innovation, Seattle,

nitish.yaddala@gmail.com,

ORCID ID: 0000-0002-1517-0331

Yaswanth Reddy Sunkara

Maryland Applied Graduate Engineering,

University of Maryland, College Park,

sunkarayaswanthreddy@gmail.com,

ORCID ID: 0009-0008-4107-4344

Abstract
In recent years, the landscape of web security threats has evolved rapidly, driven by advancements in technology and increasingly sophisticated attack vectors. This paper presents a comprehensive survey of prominent web security threats in 2024, examining both traditional vulnerabilities and emerging risks that have intensified in the digital environment. We explore a range of threats, including but not limited to application-layer attacks, network-layer intrusions, and data privacy concerns. The study draws upon a wealth of sources, including industry reports, academic research, and standards from leading organizations. Our findings underscore the critical need for web application developers, security professionals, and organizations to adopt proactive defense mechanisms and stay informed on current threats to effectively protect web-based assets. This survey aims to serve as a reference for security practitioners and researchers, highlighting essential vulnerabilities and encouraging further exploration of effective countermeasures.

Keywords
Web Security, Threat Detection, Data Privacy, Cross-Site Scripting (XSS), SQL Injection, DDoS Attacks, Zero-Trust Architecture, Quantum-Resistant Encryption, Cloud Security, Machine Learning in Security