Design and Realization of Web Cross-site Scripting  Vulnerability Detection Tool

doi:10.3969/j.issn.1000-3428.2010.06.051

Computer Engineering ›› 2010, Vol. 36 ›› Issue (06): 152-154.

• Security Technology • Previous Articles Next Articles

Design and Realization of Web Cross-site Scripting Vulnerability Detection Tool

CHEN Jian-qing, ZHANG Yu-qing

(National Computer Network Intrusion Protection Center, Graduate University of Chinese Academy of Sciences, Beijing 100049)

Received:1900-01-01 Revised:1900-01-01 Online:2010-03-20 Published:2010-03-20

Web跨站脚本漏洞检测工具的设计与实现

陈建青，张玉清

(中国科学院研究生院国家计算机网络入侵防范中心，北京 100049)

Abstract

Abstract: This paper analyzes Cross-Site Scripting(XSS) vulnerability, proposes an XSS vulnerability classification method, optimizes the XSS detecting model, and accomplishes a dynamic auto-detecting tool. It remedies the shortage of the original tool, and carries out a better result. Experiments show its feasibility and advantages compared with similar products.

Key words: Web application, Cross-Site Scripting(XSS), vulnerability

摘要： 分析跨站脚本漏洞的形成原因，提出从攻击作用位置角度对跨站脚本漏洞进行分类的方法，在此基础上完善跨站脚本漏洞检测模型，实现动态的漏洞检测工具，弥补现有工具的缺陷，检测结果更为完整。实验证明，该工具能有效检测Web应用程序中的跨站脚本漏洞，较同类工具更具优越性。

关键词: Web应用, 跨站脚本, 漏洞

CLC Number:

TP393.08

CHEN Jian-qing; ZHANG Yu-qing. Design and Realization of Web Cross-site Scripting Vulnerability Detection Tool[J]. Computer Engineering, 2010, 36(06): 152-154.

陈建青;张玉清. Web跨站脚本漏洞检测工具的设计与实现[J]. 计算机工程, 2010, 36(06): 152-154.

/ Recommend / Download Citations

URL:

https://www.ecice06.com/EN/Y2010/V36/I06/152

[1]	LIU Zhuang, GU Kangzheng, TAN Xin, ZHANG Yuan. Automatic Generation of Code for Heap Spraying Object Manipulation Targeting Kernel Vulnerability Exploitation [J]. Computer Engineering, 2025, 51(4): 178-187.
[2]	GAO Shan, WANG Chengyu, BI Chengming, ZHU Tieying. Smart Contract Reentrancy Vulnerability Detection Based on Symbolic Execution [J]. Computer Engineering, 2024, 50(10): 196-204.
[3]	Sha ZHOU, Guowei SHEN, Chun GUO. Vulnerability Information Completion Based on Security Knowledge Graph and Reverse Features [J]. Computer Engineering, 2024, 50(1): 145-155.
[4]	ZHANG Liqun, PAN Zulie, HUANG Hui, WANG Ruipeng, LI Yang. Research on Automatic Verification Method of Tcache Poisoning Heap Vulnerability Based on Symbolic Execution [J]. Computer Engineering, 2023, 49(6): 24-33.
[5]	GU Yunjie, WU Changhe, WU Qing, ZHANG Wei, Lü Tianhang, HU Qi, SONG Xiaobin, YAN Jiyu. Cascade Vulnerability Scanning Engine Deployment Strategy for Delay Optimization [J]. Computer Engineering, 2023, 49(3): 161-167,176.
[6]	Huayu LIU, Shuitao GAN, Xiaokang YIN, Xiaolong LIU, Shengli LIU, Hongliang LI. A Gray-box Test Technology Based on Intelligent Inference of Protocol Format [J]. Computer Engineering, 2023, 49(12): 129-135, 145.
[7]	Peng ZHENG, Letian SHA. Java Deserialization Vulnerability Detection Method Based on Hybrid Analysis [J]. Computer Engineering, 2023, 49(12): 136-145.
[8]	ZHU Simeng, DU Ruiying, CHEN Jing, HE Kun. Web Application Firewall Reinforcement Scheme Based on Recurrent Neural Network [J]. Computer Engineering, 2022, 48(11): 120-126.
[9]	LI Minglei, LU Yuliang, HUANG Hui, ZHU Kailong. Guided Grey-Box Fuzzing Test Method Combining Distance and Weight [J]. Computer Engineering, 2021, 47(3): 147-154.
[10]	WANG Hui, ZHAO Ya, ZHANG Juan, LIU Kun. Research on Attack Path Prediction Based on PANAG Model [J]. Computer Engineering, 2020, 46(9): 154-162.
[11]	ZHANG Haijun, CHEN Yinghui. Intelligent Detection for Big Data Scripting Attack Based on Image Processing Inspired Method and Vectorization [J]. Computer Engineering, 2020, 46(3): 129-137,143.
[12]	OUYANG Hengyi, XIONG Yan, HUANG Wenchao. A Formal Modeling and Verification Method for Token Smart Contract [J]. Computer Engineering, 2020, 46(10): 41-45,51.
[13]	ZHANG Wanying, CAO Xiaomei, CHEN Wei. Solution for Environment Interaction Problem in Whitebox Fuzz Testing [J]. Computer Engineering, 2020, 46(1): 216-221.
[14]	WANG Hui, LOU Yalong, DAI Tianwang, RU Xinxin, LIU Kun. Vulnerability Evaluation Algorithm Based on BNAG Model [J]. Computer Engineering, 2019, 45(9): 128-135,142.
[15]	LIAO Fangyuan, GAN Zhiwang. Vulnerability Analysis and Detection of Android System Signature [J]. Computer Engineering, 2019, 45(8): 25-30.

Please choose a citation manager

Content to export

Design and Realization of Web Cross-site Scripting Vulnerability Detection Tool

Web跨站脚本漏洞检测工具的设计与实现

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

模态框（Modal）标题

Please choose a citation manager

Content to export

Design and Realization of Web Cross-site Scripting Vulnerability Detection Tool

Web跨站脚本漏洞检测工具的设计与实现

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments