Design and implement for Web application vulnerabilities detection platform

• Main Authors: Chih-ChungKao, 高志忠
• Other Authors: Jung-Shian Li
• Format: Others
• Language: zh-TW
• Published: 2012
• Online Access: http://ndltd.ncl.edu.tw/handle/02548345245206413574

碩士 === 國立成功大學 === 電機工程學系專班 === 100 === The Internet has developed so vigorously that it has brought lots of convenience to people’s lives. However, if the web application developers and the website administers don’t pay attention to the security of the web application programs, the website might get attacked due to some vulnerabilities and that will bring a series of losses. To enhance the security of the website, the website administers can find out the vulnerabilities by the vulnerability scanner. But, the scanner might show misjudgment when judging the vulnerability because the users are not proficient in operation. Most users are not able to solve the misjudgment conditions, which bring about the following recovering problems. Thesis we independently develop a web application vulnerabilities detection platform, which adapts to big scale websites and that also improves the present scanner framework. It can also change the scale and efficiency of the detection platform according to the resource condition and reduce a large quantity of the scanning time as well. The paper also brings up six common ways to judge the vulnerabilities of the web application programs. That can improve on the misjudgment percentage of the present scanner and reduce the recovering problems resulted from the vulnerability misjudgment.