Strategies to reduce false alarms of web vulnerabilites scanning

Liang Hu · Journal of Changchun Post and Telecommunication Institute · 2004

Web vulnerabilities scanning has an important role in network security. However, Web scanners have been criticized for their propensity to generate a perceived large amount of false alarms. Strategies and techniques for reducing these reporting inaccuracies are described. Reasons of false alarms are discussed and methods of how to probing security holes accurately are suggested such as designing valid probing methods, choosing proper mark of identification and arranging correct judgment scheme. Examples show that these methods can improve the accuracy of scanning.

Read the paper · More papers on PaperTik