| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To provide a method for web application assessment based on intelligent generation of attach strings. <P>SOLUTION: A web application is more efficiently analyzed by intelligently generating attack sequences to be used in the assessment. Rather than simply sending a previously prepared list of static strings at a web application, the operation of the web application is analyzed to determine the filtering and acceptance characteristics of the web site. When this information is ascertained, a vocabulary of allowed symbols is created. Since this vocabulary is used in building of the attack strings, the number of attack strings fired at the web application is greatly reduced, as well as the number of false positives. <P>COPYRIGHT: (C)2008,JPO&INPIT</p> |
