Unified Approach to Vulnerability Analysis of Web Applications
H. T. Le, Peter K. K. Loh, Theodore E. Simos, George Psihoyios · AIP conference proceedings · 2008
Web vulnerabilities in web‐based applications may be detected, classified and documented. Several Web scanners exist for vulnerabilities in Web applications implemented via different technologies. However, none of them provides the technology‐independent, generic coverage of possible vulnerabilities. In this project that is funded by Mindef Singapore, we propose a new approach for Web application security and vulnerability analysis. The design addresses the categorization of scanner results with a generic data model and the design of a language‐independent rule‐based engine that detects, analyses and reports suspected vulnerabilities in web‐based applications.