| 摘要 |
PURPOSE: A security device of a web server is provided to detect a malicious source code uploaded by a test code, a temporary file, or a hacker which is generated when a website is developed or operated, thereby increasing security of a web source code. CONSTITUTION: A web security device(300) is placed between a user terminal(200) and a web server(400). The web security device prevents an illegal access to the web server. A management server(500) analyzes a source code of a publishing file uploaded in the web server to extract and compare the list of all files to which the source code refers and the list of all files uploaded in the web server. If a file is not included in a reference file list and included in an upload file list, the management server provides the lists of the files to a developer and a manager. |
