Authors : Aryan P. Kalbandhe; Isha K. Pakhode; Saurabh V. Bhatkar; Aditya D. Barate

Volume/Issue : Volume 11 - 2026, Issue 3 - March

Google Scholar : https://tinyurl.com/ukr82nd5

Scribd : https://tinyurl.com/mwbfrbr3

DOI : https://doi.org/10.38124/ijisrt/26mar854

Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.

Abstract : With the increasing use of web applications and online systems, cybersecurity threats such as malware and vulnerable code have become a major challenge for developers and organizations. Many security issues arise due to insecure coding practices or the use of unverified files and links. To address this problem, this project presents Secure Scan, a web-based security analysis tool designed to detect malicious files and identify common code vulnerabilities. Secure Scan integrates the VirusTotal API to scan files and URLs using multiple antivirus engines, helping users quickly identify potentially harmful content. In addition, the system includes a code scanning module that analyzes source code for common security vulnerabilities based on the OWASP Top 10, such as SQL Injection, Cross-Site Scripting (XSS), and command injection. The backend of the system is developed using Node.js, which manages the scanning process, vulnerability detection logic, and API communication. The goal of Secure Scan is to provide developers with a simple and accessible platform to perform basic security checks during the development process. By combining malware detection and code vulnerability analysis into a single tool, Secure Scan helps promote secure coding practices and improves overall software security.

References :

1. OWASP Foundation, "OWASP Top Ten Project," 2021. [Online]. Available: https://owasp.org/www-project-top-ten/. [Accessed: Mar. 10, 2026].
2. Google, "VirusTotal – Analyze suspicious files and URLs to detect malware and automatically share them with the security community," 2024. [Online]. Available: https://www.virustotal.com/. [Accessed: Mar. 10, 2026].
3. A. K. Sharma and R. Gupta, "Automated Detection of Web Application Vulnerabilities Based on OWASP Top 10," International Journal of Information Security and Privacy, vol. 18, no. 2, pp. 45–60, 2023.
4. S. Patel, M. Desai, and P. Shah, "A Framework for Malware Detection Using Online Threat Intelligence Platforms," IEEE Access, vol. 11, pp. 98231–98245, 2023.
5. J. Brown and L. Carter, "Integrating Cyber Threat Intelligence into Secure Software Development Lifecycle," Journal of Cybersecurity Technology, vol. 7, no. 1, pp. 25–41, 2022.
6. R. Singh and V. Kumar, "Detection of SQL Injection and Cross-Site Scripting Attacks Using Static Code Analysis," Proceedings of the IEEE International Conference on Cyber Security and Protection of Digital Services, pp. 112–118, 2022.
7. Node.js Foundation, "Node.js Documentation: Event-Driven Architecture and Non-Blocking I/O," 2024. [Online]. Available: https://nodejs.org/. [Accessed: Mar. 10, 2026].
8. H. Lee and K. Park, "Real-Time Web Security Monitoring Using Node.js-Based Architecture," International Journal of Web Engineering and Technology, vol. 19, no. 3, pp. 210–224, 2024.
9. OWASP ZAP Project, "OWASP Zed Attack Proxy (ZAP) – Web Application Security Scanner," 2024. [Online]. Available: https://www.zaproxy.org/. [Accessed: Mar. 10, 2026].
10. PortSwigger Ltd., "Burp Suite – Web Vulnerability Scanner," 2024. [Online]. Available: https://portswigger.net/burp. [Accessed: Mar. 10, 2026].
11. M. Khan and S. Ali, "Cyber Threat Intelligence Platforms for Modern Web Applications: Challenges and Opportunities," Computers & Security, vol. 132, pp. 103–118, 2024.
12. P. Verma and N. Jain, "Static Code Analysis for Secure Software Development: A Survey," Journal of Network and Computer Applications, vol. 220, pp. 103600, 2023