Article Detail

Cemre Tugce KILINC

Keywords

cybersecurity vulnerability scanning network security performance analysis Nmap OpenVAS penetration testing Flask SQLite

Doi : 10.71350/jere.2026179

Abstract

This study presents CyberBench, a web-based platform developed for the systematic performance comparison of widely used cybersecurity testing tools: Nmap, OpenVAS, Nikto, Metasploit, and Wireshark. The platform evaluates tools across four key metrics: scan duration, vulnerability detection capacity, resource consumption (CPU and RAM), and false positive rate. A weighted scoring algorithm assigns 20% to speed, 30% to detection capacity, 25% to resource efficiency, and 25% to accuracy. Results indicate that Nmap achieves the highest composite score (82/100) due to its speed and low resource footprint, while OpenVAS leads in vulnerability detection (134 vulnerabilities). The CyberBench platform is built on Python Flask, SQLite, and Chart.js, providing interactive visualizations and automated report generation. The system enables security professionals to make data-driven tool selection decisions.

References

1. Gordon Lyon, F. (2009). Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Insecure.Com LLC.
2. Stuttard, D., & Pinto, M. (2011). The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws (2. baski). Wiley.
3. Kennedy, D., O'Gorman, J., Kearns, D., & Aharoni, M. (2011). Metasploit: The Penetration Tester's Guide. No Starch Press.
4. Orebaugh, A., Ramirez, G., & Beale, J. (2007). Wireshark & Ethereal Network Protocol Analyzer Toolkit. Syngress.
5. Gordon, J. et al. (2018). Comparative Analysis of Open Source Vulnerability Scanners. Journal of Information Security, 9(3), 201–218.
6. OWASP Foundation. (2023). OWASP Top Ten. https://owasp.org/www-project-top-ten/
7. NIST. (2024). National Vulnerability Database (NVD). https://nvd.nist.gov/
8. Greenbone Networks. (2024). OpenVAS Documentation. https://www.openvas.org/
9. Google Firebase. (2024). Flask Documentation. https://flask.palletsprojects.com/
10. Bhatt, S., Manadhata, P. K., & Zomlot, L. (2014). The Operational Role of Security Information and Event Management Systems. IEEE Security & Privacy, 12(5), 35-41.
11. Farooq, M. U., & Waseem, M. (2015). A Survey on Internet of Things Security. International Journal of Advanced Research in Computer Science and Software Engineering, 5(4), 452-458.
12. Shanley, A., & Smeltzer, M. (2016). Comparative Analysis of Penetration Testing Tools. Journal of Information Security Research, 7(2), 88-101.
13. Dilek, S., Cakir, H., & Aydin, M. (2019). Applications of Artificial Intelligence Techniques to Combating Cyber Crimes: A Review. International Journal of Artificial Intelligence & Applications, 10(1), 21-39.
14. Doğan, N. (2025). Identifying the Dominant Attribute in Android-Based Malware Detection. Tethys Environmental Science, 2(4), 199-205, doi : 10.5281/zenodo.18075972
15. Sarıaslan, G. (2025). Analysis of Attack Methodologies in IoT Networks and Examinination of RT-IoT2022. Journal of Natural and Engineering Research, 1(1), 30-37, doi : 10.5281/zenodo.18664507