WEB dynamic security flaw detection method based on JAVA

A vulnerability detection and dynamic security technology, which is applied in the field of WEB application security testing, can solve the problems of high testing cost, high basic quality requirements of testers, and inability to pay attention to the position of the program under test or the internal logic code of the system, so as to reduce the high Effect of cost, low false negative and false positive rates
CN103699480AActive Publication Date: 2014-04-02HANGZHOU ANHENG INFORMATION TECH CO LTD
3 Cites 25 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
HANGZHOU ANHENG INFORMATION TECH CO LTD
Publication Date
2014-04-02

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
Patent Text Reader

Abstract

The invention relates to a security test of WEB application, and aims to provide a WEB dynamic security flaw detection method based on JAVA. The WEB dynamic security flaw detection method based on JAVA is used for detecting the security flaws of a WEB application system, and comprises the following steps: modifying JAVA middleware; performing fuzzing test and dynamic flaw tracking. Due to the adoption of the WEB dynamic security flaw detection method, more WEB security flaw problems can be found rapidly, the security flaw range of black box test can be better covered, more deep WEB security problems can be found, the problem of high cost in white box test can be solved, the specific position of a flaw code can be determined more accurately, and lower missing report rate and error report rate in a detection process are ensured.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to WEB application security testing, in particular to a JAVA-based WEB dynamic security loophole detection method. Background technique

[0002] In WEB application security testing, frequently used detection methods are usually black-box testing and white-box testing. But both black-box testing and white-box testing have different defects.

[0003] Black-box testing can only find out all the errors in the program only when the test method of exhaustive input information is adopted and all possible input information is considered as the test situation. In fact, there are infinitely many test situations, and people not only need to test all legal information inputs, but also test those information inputs that are illegal but possible. From this point of view, it is impossible to complete the test, so we need to conduct targeted security vulnerability testing, guide the implementation of testing by formulating test cases, and ensur...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More