Research And Application Of Key Technologies For Web Security Testing Platform

With the development of network communication technology and the improvement of Internet infrastructure which promote the application and the network businesses. Many organizations and individuals began to processing or transferring sensitive data on Internet. How to ensure the security of network applications becomes a pressing task.For now, there are some scanning and detecting tools on the Web security such as Web vulnerability scanning and Web Trojan detection. Most of these tools are single function and can not to do comprehensive detection, analysis and evaluation for Web sites. The thesis studies the technologies in the security detection platform which is based on Web. The main work includes:1) Proposed a heartbeat surveillance mechanism based on multi-tools. This can effectively reduce the server load and make the scanning tools as a plug-in to be used in the platform.2) Discussed in depth the reporting technology. Design and implement the report to improve the usability and the experience.3) With the aim to improve the efficient, we introduced a new algorithm based on Apriori algorithm. We analyze the testing data to found the potential relationship between vulnerabilities through the algorithm.Based on the above technologies, a platform for Web security testing is be implemented. Users can scan and analysis the target websites through the platform. And at last, experiments verify the efficiency of the platform.