Web应用安全风险评估研究

Research of Web Application Security Risk Assessment

针对Web应用程序中存在的漏洞问题,提出了符合Web应用安全特点的风险评估方法,给出了具体的评估流程及算法,并在此基础上对Web应用安全风险值进行了模糊处理,从而使评估结果更加准确.

There are many vulnerabilities problems in the Web application of the programs. In this paper a risk assessment method according to the features of the web application security is put forward. A specific assessment process and algorithm is given, In order to make the risk assessment accurate, a Fuzzy treatment to the evaluation value is performed.