基于特征集合的XSS漏洞安全研究

Security Research on XSS Vulnerability Based on Feature Set

跨站脚本XSS是Web安全的主要威胁。在分析网页爬虫的爬取流程基础上,提出一种网络爬虫架构,根据特征集合对爬取的网页资源进行XSS漏洞分析。通过Java和Python环境下的实验测试,该爬虫架构能爬取到页面的细小方面,使用特征提取能够进行有效的识别。

XSS is a major threat to the Web security. After analyzed crawling process of Web crawler, a Web crawler architecture is proposed and the XSS vulnerability- of crawling Web resources is analyzed according to the feature set. The results of experimental under the Java and Python environment show that the crawler architecture can crawl to the small aspects of the Web page, and can be effectively identified by using feature extraction.