一种基于网络爬虫的跨站脚本漏洞检测方法  

A Method Based on Web Crawler for XSS Vulnerability Detection

作　　者：文凯[1] 何小东[1] 

机构地区：[1]中南林业科技大学计算机与信息工程学院,长沙410004

出　　处：《电脑编程技巧与维护》2012年第24期121-123,共3页Computer Programming Skills & Maintenance

摘　　要：跨站脚本(Cross Site Scripting,简称XSS)是Web应用程序中常见的一种安全漏洞,它允许恶意的Web用户将代码植入到提供给其他用户使用的页面中,从而进行XSS攻击。在分析XSS存在形式、攻击过程和攻击原理的基础上,提出了一种基于网络爬虫的XSS漏洞检测方法,通过实验验证了其有效性。The cross site scripting attack （Cross Site Scripting,XSS is the abbreviation） is a common security vulnerability of Web application.which attacks the client of accessing to server for a target,through the malicious script sending to the third sites of the users of sensitive information.This paper first analyses the cross site scripting attack forms of existence and attack process,and the principle of against,then designs a xss vulnerability detection method which based on Web crawler＇s,and its feasibility is verified by experiments.

关 键 词：跨站脚本攻击 WEB安全 网络爬虫 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]