| Web应用漏洞扫描检测系统 |
| |
| 引用本文： | 卢志科,康晓凤,眭桢屹,王 昊,刘冀卿,孙冲冲.Web应用漏洞扫描检测系统[J].教育技术导刊,2019,18(8):186-190. |
| |
| 作者姓名： | 卢志科 康晓凤 眭桢屹 王 昊 刘冀卿 孙冲冲 |
| |
| 作者单位： | 徐州工程学院 信电工程学院，江苏 徐州 221000 |
| |
| 基金项目： | 江苏省大学生创新创业训练项目（xcx2018023） |
| |
| 摘 要： | Web应用系统已在生活中得到广泛应用，针对这些系统的黑客攻击也十分严重。黑客大多是利用已知漏洞进行攻击，因此如果修补系统存在的已知漏洞，即可防御大多数攻击。采用分布式架构与多线程技术设计并实现了一个Web应用漏洞扫描系统，将主动扫描与被动检测相结合，并通过相应插件对Web系统进行扫描，从而快速识别出owasp10常见漏洞。用户部署该系统后，可以定期对Web应用进行检测，以识别Web应用中是否存在漏洞。通过及时发现漏洞并进行修补，可有效保障Web应用的安全性，将黑客攻击风险降到最低。
|
| 关 键 词： | Web应用 漏洞检测 黑客攻击 分布式架构 |
| 收稿时间： | 2018-11-16 |
Web Application Vulnerability Scanning Detection System |
| |
| LU Zhi-ke,KANG Xiao-feng,SUI Zhen-yi,WANG Hao,LIU Ji-qing,SUN Chong-chong.Web Application Vulnerability Scanning Detection System[J].Introduction of Educational Technology,2019,18(8):186-190. |
| |
| Authors: | LU Zhi-ke KANG Xiao-feng SUI Zhen-yi WANG Hao LIU Ji-qing SUN Chong-chong |
| |
| Institution: | Xuzhou Institute of Technology， Xuzhou 221000，China |
| |
| Abstract: | The advantages of Web application systems make this technology widely used， and hacking attacks against these systems are becoming more serious. Most hackers exploit known vulnerabilities to attack， so if a known vulnerability is fixed in the system， one can defend against most attacks. The Web application vulnerability scanning system implemented by this system adopts distributed architecture and multi-threading technology， combines active scanning and passive detection， and scans the Web system through corresponding plug-ins， which can quickly identify the common vulnerabilities of owasp10 and the famous Know the vulnerabilities. After the user deploys the system， the Web application can be detected periodically and in time identify whether there is a corresponding ensured can be vulnerability in the Web application. Vulnerabilities are discovered instantly and patched so that the security of Web applications， minimizing the risk of hacker attacks and avoiding losses. |
| |
| Keywords: | Web application Web application hacking attacks distributed architecture |
|
| 点击此处可从《教育技术导刊》浏览原始摘要信息 |
| 点击此处可从《教育技术导刊》下载免费的PDF全文 |
