State of the Art Automated Black-Box Web Application Vulnerability Testing

Jason Bau; Elie Bursztein; Divij Gupta; John C. Mitchell

study

State of the Art Automated Black-Box Web Application Vulnerability Testing

By Jason Bau, Elie Bursztein, Divij Gupta, John C. Mitchell @S&P 2010

0 reaction(s) | 1410 downloads

We evaluate the effectiveness of the most popular web automated vulnerability scanners and analyze how effective they are at detecting various vulnerabilities (XSS, CSRF, SQLi�). We also test how good they are at crawling websites and discovering non-standard links (flash, java, AJAX)

You liked it, share it !

Downloads

paper

slides

@INPROCEEDINGS {
title	= {State of the Art Automated Black-Box Web Application Vulnerability Testing}
author	= {Jason Bau and Elie Bursztein and Divij Gupta and John C. Mitchell}
booktitle	= {Security and Privacy(S&P)}
year	= {2010}
month	= {May}
url	= {\url{http://elie.im/publication/state-of-the-art-automated-black-box-web-application-vulnerability-testing}}
}