WAF设备测试技术  

WAF Device Testing Technology

作　　者：王鑫 李婷婷 汤艳 WANG Xin;LI Tingting;TANG Yan(The 15th Research Institute of China Electronics Technology Group Corporation,Beijing 100083)

机构地区：[1]中国电子科技集团公司第十五研究所,北京100083

出　　处：《软件》2023年第11期62-66,共5页Software

摘　　要：本文对作为网络应用层防护设备的WAF设备的测试方法进行研究。在分析Web应用服务器面临的网络攻击威胁及其可能存在的安全漏洞基础上,本文重点从WAF设备源码安全性、功能有效性、性能能力三方面提出测试方法。应用该方法可知悉WAF设备防护能力现状,有助于其防护策略的优化。This paper investigates the testing methods of WAF devices as web application layer protection devices.On the basis of analyzing the network attack threats faced by Web application servers and their possible security vulnerabilities,this paper puts forward the test method from three aspects of source code security,function effectiveness and performance capability of WAF equipment.The application of this method can know the current status of WAF device protection capability and help optimize its protection strategy.

关 键 词：WAF Web服务器防护 测试方法 

分 类 号：TP311.56[自动化与计算机技术—计算机软件与理论]