arrow
Return

A Web Second-Order Vulnerabilities Detection Method

delete2018-01-01
delete10
delete
OA
AI
M
Miao Liu *
王斌 (Bin Wang)
DOI:10.1109/ACCESS.2018.2881070delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Second-order vulnerabilities are more subtle and more destructive than the first-order vulnerabilities. After researching and analyzing the principles of web penetration testing and second-order attack principles, this paper proposes a method to detect web second-order security vulnerabilities. The method detects web second-order security vulnerabilities through two crawl scans. It crawls the website URL for the first time, sends anchor points, crawls URLs of the storage anchor point for the second time, and detects second-order web security vulnerabilities specifically for these suspicious URLs. The approach greatly reduces the time complexity of detecting second-order web security vulnerabilities and makes up for the lack of methods to detect web security second-order vulnerabilities.
Keywords:
Web security
second-order attacks
penetration testing
second-order vulnerability detection
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

G
Guangzhou University
Scholars:
1.7W
Papers: 1.3W
Citations: 1.8W