CAJ | 학술논문

本文研究了国内外Web漏洞库及建设的现状，设计并实现了一个专注于Web漏洞发布的Web漏洞数据库。文中兼顾了Web漏洞的固有特点及其与传统漏洞的属性差别，设计了Web漏洞库描述模型，丰富了Web漏洞的收集方法，定义了Web漏洞的漏洞评价属性标准，并在Web漏洞库中添加了Web漏洞重现模块。我们所设计的Web漏洞库确保了全面的Web漏洞信息收集和Web漏洞信息发布的标准化，可更好地对Web漏洞信息和数据进行分析研究，也为Web安全提供了有力的技术支撑。
본문연구료국내외Web루동고급건설적현상，설계병실현료일개전주우Web루동발포적Web루동수거고。문중겸고료Web루동적고유특점급기여전통루동적속성차별，설계료Web루동고묘술모형，봉부료Web루동적수집방법，정의료Web루동적루동평개속성표준，병재Web루동고중첨가료Web루동중현모괴。아문소설계적Web루동고학보료전면적Web루동신식수집화Web루동신식발포적표준화，가경호지대Web루동신식화수거진행분석연구，야위Web안전제공료유력적기술지탱。
Based on the research of Web vulnerability database and the situation of vulnerability database construction at home and aboard, the paper designed and implemented a vulnerability database focused on Web vulnerabilities. In consideration of both the features of Web vulnerability and the differences with traditional vulnerability, the paper designed the Web vulnerability database description model, enriched the ways of Web vulnerability collection, redefined the Web vulnerability scoring attributes and added the Web vulnerability reproduce function. The Web vulnerability database guarantees the comprehensive collection of Web vulnerability information and the standard release of Web vulnerability information, helps analyze the Web vulnerability information and data better, and provides a powerful technical support to Web security.