基于代理的被动式Web漏洞检测研究

A Proxy-based Approach of Passive Scanning Security Vulnerability of Web Application

该文针对Web应用安全的常见漏洞,设计了基于客户端代理的被动式漏洞检测系统。该系统自动完成对应用程序中潜在的漏洞检测,并与当前流行的检测工具做了比较。通过对实验结果的分析可知,基于代理的被动式检测方法对应用程序的负载更小,检测范围更广。

A proxy-based passive scanning tool is designed to inspect the vulnerability of web applications.Analysis and comparison with other prevalent web scanner is also made.Result show that PWS would automatically detect more potential vulnerability with lower system load.