为提高Web软件和网站的安全性,保护用户数据不受损伤,提出秘钥交换环境下Web安全漏洞智能检测方法.通过研究秘钥交换环境下Web安全漏洞的产生机理,设计安全性能更高的秘钥交换安全协议,在此基础上,从SVN服务器中解析出Web软件或网站的源代码,选定用于检测Web安全漏洞的功能插件并进行驱动,使用规则表达式规范功能插件的检测规则,从而检测出秘钥交换环境下的Web安全漏洞.实验结果表明,该方法在秘钥交换环境下的检测可靠性高、灵活性强.%In order to improve the security of Web software and Web site,and protect the user data free from the damage, a Web security vulnerabilities intelligent detection method in the secret key exchange environment is put forward. The produc-tion mechanism of the Web security vulnerabilities in the secret key exchange environment is studied to design the secret key ex-change security protocol with higher safety performance. On this basis,the source code of Web software or Web site is parsed in SVN server. The function plugin to detect the Web security vulnerabilities is selected and driven. The regulation expression is used to regulate the detection rule of the function plugin to detect the Web security vulnerabilities in the secret key exchange en-vironment. The experimental results show that the method has high detection reliability and strong flexibility in the secret key ex-change environment.
展开▼
