Survey on Web security testing technologies
JI Ling-li · Jisuanji yingyong yanjiu · 2012
A thorough test for Web application programs can be beneficial to finding security vulnerabilities promptly and improving the security quality of Web application.This paper firstly introduced the classification of Web application security threat and summarized common Web application security vulnerabilities.Then it comprehensively surveyed the state of Web security testing technology research,respectively compared weaknesses and merits of the static technologies and the dynamic technologies.At the same time,it introduced and concluded the detail of fuzzing,which was the new emerging technology in Web security testing.At last,this paper presented the problem to be solved and the future research direction.