Web跨站脚本漏洞检测工具的设计与实现

Design and Realization of Web Cross-site Scripting Vulnerability Detection Tool

分析跨站脚本漏洞的形成原因,提出从攻击作用位置角度对跨站脚本漏洞进行分类的方法,在此基础上完善跨站脚本漏洞检测模型,实现动态的漏洞检测工具,弥补现有工具的缺陷,检测结果更为完整。实验证明,该工具能有效检测Web应用程序中的跨站脚本漏洞,较同类工具更具优越性。

This paper analyzes Cross-Site Scripting（XSS） valnerability, proposes an XSS vulnerability classification method, optimizes the XSS detecting model, and accomplishcs a dynamic auto-detecting tool. It remedies the shortage of the original tool, and carries out a better result. Experiments show its feasibility and advantages compared with similar products.