| 摘要 |
PROBLEM TO BE SOLVED: To conduct a complex test by expressing a scenario of inspection as a script described in programming language, and automatically calling a plug-in (corresponding to means for executing inspection) from the script. SOLUTION: Scripts in which procedures used normally by attackers are described in the programming language are accumulated in advance and the script which the user selects from among the accumulated scripts is executed. Thus, the plug-in with logic built in for attacking each individual security hole is called and executed on the computer to be inspected, whereby the need for the user to have knowledge on security, such as the relationship of inputs and outputs between the means for executing inspection, can be eliminated. COPYRIGHT: (C)2004,JPO |
