Ανάπτυξη ολοκληρωμένου μηχανισμού απογραφής και διαχείρισης επιφάνειας απειλών

Γιαννίκος, Παναγιώτης

Development of an integrated mechanism for automated inventorying and Attack Surface Management (ASM)

Master Thesis

Author

Γιαννίκος, Παναγιώτης

Date

2026-07

Abstract

This thesis addresses the development of an integrated mechanism and procedures for the automated inventory of an organisation's attack surface (Attack Surface Management — ASM) and the timely alerting on known vulnerabilities. The tool, named WebSocRates ASM, is implemented as an orchestrated Python pipeline that combines well-established open-source utilities from the ProjectDiscovery ecosystem (subfinder, httpx, naabu, nuclei). The approach is structured in three phases: discovery (subdomains, live endpoints and open ports), validation (targeted vulnerability scanning with nuclei) and reporting (generation of an interactive HTML dashboard enriched with the CISA Known Exploited Vulnerabilities feed, with optional email delivery). The architecture, the functional and non-functional requirements, and a comparative positioning against existing solutions are presented.

Postgraduate Studies Programme

Κυβερνοασφάλεια και Επιστήμη Δεδομένων

Department

Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Πληροφορικής

Number of pages

Language

Greek

URI

https://dione.lib.unipi.gr/xmlui/handle/unipi/19506

Collections

Τμήμα Πληροφορικής

Show full item record

Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού-Μη Εμπορική Χρήση 3.0 Ελλάδα