tousepowerfulgoodperforma
ceofWebapplicatio
vul
erabilitydetectio
toolThetoolca
detectcommo
Webvul
erabilitiesi
cludi
gSQLi
jectio
a
dXSSvul
erabilitiesWhat’smorethetoolhasalowrateoffalsepositiveshighdetectio
efficie
cya
daccuracya
dca
ge
eratethesca
resultsreport
Firstofallthispapera
alyzedthecurre
tresearchresultsa
dtheexisti
gWebapplicatio
vul
erabilitydetectio
toolsThepaperdidtheresearcho
somek
owledgeaboutwebapplicatio
i
cludi
gHTTPprotocola
dwebcrawlertech
ologyWhat’smorethepapera
alyzedthepri
ciplesclassificatio
a
dattackskillsaboutSQLi
jectio
a
dXSSvul
erabilitiesI
theprocessofXSSvul
erabilitydetectio
wefirstlyusedthedetectio
scriptprobedwithlegalstri
ga
dthe
usedtheaggressivedetectio
scriptsforfurthertestaccordi
gtopreviousresultAsaresultitca
effectivelyimprovethedetectio
efficie
cy
Basedo
abovek
owledgethemai
poi
tofpaperwastoa
alyzea
ddesig
ethe
webapplicatio
detectio
systemdetailydividi
gthesystemi
toseveralfu
ctio
al
modulesAfterthatIimpleme
tedthesystemthroughcodi
ga
ddescribedthe
specificimpleme
tatio
theorya
dprocessesofthesystemFi
allyItestedthesystem
i
cludi
gfu
ctio
a
defficie
cya
dtheresulteshowedthattheWebapplicatio
vul
erabilitiesdetectio
systemachievedexpectedtargetwhichcouldhelpusersfi
d
vu
l
erablitieseffectively
KEYWORDS：WebSecurityVul
erabilitiesDetectio
SQLI
jectio
XSS
f北京交通大学硕士专业学位论文
目录
目录
摘要I
ABSTRACTII
1绪论1
11研究背景112研究意义313国内外研究现状414研究内容515论文结构6
2WEB应用相关技术7
21HTTP协议722网络爬r