Russian Federation
The article shows the need to use a multi-level architecture for protecting the web application of an online store, which arises due to various types of security threats. The paper proposes an architecture scheme for the application being developed, describes the technological mechanisms that ensure its security.
information security, web application, OWASP, SQL injection, XSS attacks, FastAPI
1. OWASP Foundation. OWASP Top 10:2021. – URL: https://owasp.org/www-project-top-ten/(data obrascheniya: 12.10.2025).
2. GOST R 59407-2021. Informacionnye tehnologii. Metody i sredstva obespecheniya bezopasnosti. Bazovaya arhitektura zaschity personal'nyh dannyh. – M.: Standartinform, 2021. – 32 s.
3. GOST ISO/IEC 29100-2021. Informacionnye tehnologii. Metody i sredstva obespecheniya bezopasnosti. Osnovy zaschity personal'nyh dannyh. – M.: Standartinform, 2021. – 28 s.
4. Galatenko, V.A. Osnovy informacionnoy bezopasnosti. – M.: Internet-universitet informacionnyh tehnologiy (INTUIT), Ay Pi Ar Media, 2024. – 266 s.
5. Vybor kriteriya optimal'nosti pri prinyatii upravlencheskih resheniy v slozhnyh tehnicheskih sistemah / A.V. Skrypnikov [i dr.] // Modelirovanie sistem i processov. – 2024. – T. 17, № 1. – S. 120-128. DOI: https://doi.org/10.12737/2219-0767-2024-17-1-120-128; EDN: https://elibrary.ru/MMIAIH
6. Mochalov, V.P. Algoritm dinamicheskogo raspredeleniya i balansirovki nagruzki v raspredelennyh oblachnyh vychisleniyah / V.P. Mochalov, N.Yu. Bratchenko, D.V. Gosteva // Modelirovanie sistem i processov. – 2024. – T. 17, № 1. – S. 92-102. DOI: https://doi.org/10.12737/2219-0767-2024-17-1-92-102; EDN: https://elibrary.ru/EWMPYM
7. Stelea, G.A. When Cybersecurity Meets Accessibility: A Holistic Development Architecture for Inclusive Cyber-Secure Web Applications and Websites / G.A. Stelea, L. Sangeorzan N. Enache-David // Future Internet. – 2025. – Vol. 17. – S. 67. DOI: https://doi.org/10.3390/fi17020067; EDN: https://elibrary.ru/IPOMZM
8. Tun, Yu. Razrabotka algoritma povysheniya effektivnosti protokola marshrutizacii S-LEACH / Yu. Tun, T.P. Novikova, S.A. Evdokimova // Modelirovanie sistem i processov. – 2022. – T. 15, № 2. – S. 93-99. DOI: https://doi.org/10.12737/2219-0767-2022-15-2-93-99; EDN: https://elibrary.ru/WDIQHG
9. Prasetyawan, D. Pengembangan Sistem Seleksi Proposal Penelitian Berbasis Web Service Menggunakan REST API / D. Prasetyawan, P. D. Rahmanto // JTIM. – 2024. – Vol. 6, no. 3. – Pp. 283-295. DOI: https://doi.org/10.35746/jtim.v6i3.585
