Determination and classification of defense measures in web applications

摘要

Techniques for determining classifications of defense measures as described herein. Security tokens are identified to be used to test defense measures of a web application. Combinations of security tokens are determined, wherein the combinations of security tokens are related to classifications of the defense measures. A combination is executed at an input point of the web application. Based on the output of the web application received in response to the executed combination, a classification for a defense measure of the web application is determined.

主权项

1. A computing device, comprising:
a storage device; and a processor, the storage device having instructions that when executed by the processor, cause the computing device to: identify security tokens to be used to test defense measures of a web application; determine combinations of the security tokens that are related to classifications of the defense measures; execute one of the combinations of the security tokens at an input point of the web application; determine a classification for a defense measure of the web application based on an output of the web application in response to the executed one of the combinations; and widening the classification determination to account for a measure of error.