CAJ | 학술논문

为了评估现有Web应用程序扫描器功能的完整性和优缺点,研究Web应用扫描器的整体框架,对框架的重要组成部分提出了其评估指标.针对国内缺乏统一Web应用程序扫描器评估标准,研究了国外Web应用程序扫描器厂商联合提出的Web应用程序扫描器评估标准,指出了该标准的优势和劣势.使用提出的评估指标对选取的三款商业Web应用程序扫描器进行评估,评估结果能够在功能上有效区分这三款Web应用程序扫描器,证明了提出的评估指标能够较好评估Web应用程序扫描器的功能性.
위료평고현유Web응용정서소묘기공능적완정성화우결점,연구Web응용소묘기적정체광가,대광가적중요조성부분제출료기평고지표.침대국내결핍통일Web응용정서소묘기평고표준,연구료국외Web응용정서소묘기엄상연합제출적Web응용정서소묘기평고표준,지출료해표준적우세화열세.사용제출적평고지표대선취적삼관상업Web응용정서소묘기진행평고,평고결과능구재공능상유효구분저삼관Web응용정서소묘기,증명료제출적평고지표능구교호평고Web응용정서소묘기적공능성.
In order to assess integrity and advantages and disadvantages of Web application scanners function,study the Web application scanner overall framework,put forward the evaluation indicators for the important parts of the framework. Aiming to the domestic lack of unified Web application scanner evaluation criteria,Web application scanner assessment standards are researched proposed by the foreign Web application scanner manufacturers combination,pointing out the advantages and disadvantages of this standard. Using the proposed e-valuation indicators to evaluate the selected three paragraphs commercial Web application scanner,the evaluation results can effectively distinguish between the three paragraphs Web application scanner on the function,proved that the proposed evaluation indicators can bet-ter evaluate Web application scanner function.