分析了Web 應(yīng)用中存在的主要安全缺陷，設(shè)計(jì)了一種基于XML 的Web 應(yīng)用安全缺陷特征庫(kù)模型—WAML，討論了WAML 的具體描述內(nèi)容，并給出了Web 應(yīng)用安全管理系統(tǒng)的設(shè)計(jì)方案。
關(guān)鍵詞：Web 應(yīng)用；安全缺陷；WAML；XML
A Description Schema of Web Application Vulnerability Based on XML Ding Ni , Gu Yunhua (School of Computer and Software , Nanjing University of Information Science and Technology , Nanjing , Jiangsu , 210044) Abstract: The common vulnerabilities existed in the current Web applications are pointed out and the present description methods of vulnerability are analyzed. Thus WAML(Web Application? Markup Language)—a Web application description schema is designed based on XML and the specification of the module is discussed in detail.Then a model of Web Application Security Management System is discussed.
Keywords: Web Application; vulnerability; WAML; XML