Web application threat modeling and quantitative assessment
Hongbing Wang · Journal of Tsinghua University(Science and Technology) · 2009
A method of current web application threats was developed to quantitatively assess web application threats based on an attack graph.The attack graphic modeling is described for quantitative web application threat assessments.The attack graph generation algorithm and web threat assessment method were validated in a typical web application network environment.The threat assessment identifies every potential threat and attack route which are necessary for effective risk protection.