对Web应用程序有效安全测试方法和工具的比较评估
Sana Qadir1, Eman Waheed1, Aisha Khanum1
1Faculty of Computing, National University of Sciences & Technology, Islamabad, Pakistan.
PeerJ. Computer science
|June 26, 2025
概括
动态和静态应用程序安全测试 (SAST和DAST) 的有效性因漏洞类型而异. DAST在某些OWASP类别中表现出色,而SAST对于严重的缺陷至关重要,特定工具表现出卓越的性能.
科学领域:
- 软件工程 软件工程 软件工程
- 网络安全 网络安全
- 应用程序安全测试应用程序安全测试
背景情况:
- 静态应用程序安全测试 (SAST) 和动态应用程序安全测试 (DAST) 被广泛接受为全面的Web应用程序安全的必要条件.
- 然而,它们对特定风险类别 (OWASP Top 10:2021,CWE Top 25:2023) 和严重程度的比较有效性缺乏实证证据.
- 这种差距导致安全测试效率低下,增加成本和时间,特别是考虑到可预防的安全事件的增加.
研究的目的:
- 实证地评估受欢迎的,免费的和开源的SAST和DAST工具的有效性.
- 确定哪些工具和方法最适合在OWASP Top 10:2021和CWE Top 25:2023列表中检测特定漏洞.
- 根据风险类别和严重程度,为选择安全测试工具提供基于证据的建议.
主要方法:
- 测试了技术,健康和教育领域的75个现实世界Web应用程序.
- 使用四个SAST和五个DAST开源工具来扫描每个应用程序.
- 漏洞检测的有效性是通过确定问题的数量和严重程度来衡量,与OWASP Top 10:2021和CWE Top 25:2023进行映射.
主要成果:
- 对于四个OWASP Top 10:2021类别,DAST工具是首选的,而对于三个类别,SAST工具是首选的;两个类别得到了同等的解决.
- 对于CWE Top 25:2023,所有方法 (SAST,DAST,组合) 都同样有效,每个方法涵盖三个类别.
- 观察到显著的局限性,在一个OWASP和八个CWE类别中没有工具检测漏洞;OWASP ZAP (DAST) 在特定类别中表现出色,Yasca (SAST) 在高严重性缺陷中,WASP/Vega (DAST) 在中低严重性问题中.
结论:
- DAST 工具在检测某些类型的漏洞方面表现出优越性,而 SAST 工具对于识别高严重性的问题是不可或缺的.
- 该研究强调了当前流行的开源工具的关键局限性,表明需要改进检测能力.
- 结果为选择SAST和DAST工具提供了实际的,基于证据的指导,优化了组织的安全测试效率和成本效益.
更多相关视频
16:02Demonstration of the Sequence Alignment to Predict Across Species Susceptibility Tool for Rapid Assessment of Protein Conservation
Published on: February 10, 2023
2.8K
07:31A Computerized Functional Skills Assessment and Training Program Targeting Technology Based Everyday Functional Skills
Published on: February 13, 2020
7.0K
相关概念视频
Multiple Comparison Tests
4.0K
Multiple comparison test, abbreviated as MCT, is a post hoc analysis generally performed after comparing multiple samples with one or more tests. An MCT will help identify a significantly different sample among multiple samples or a factor among multiple factors.
It would be easy to compare two samples using a significance alpha level of 0.05. In other words, there is only one sample pair to be compared. However, it would be difficult to identify a significantly different sample if the number...
It would be easy to compare two samples using a significance alpha level of 0.05. In other words, there is only one sample pair to be compared. However, it would be difficult to identify a significantly different sample if the number...
4.0K
Reliability and Validity
13.2K
Reliability and validity are two important considerations that must be made with any type of data collection. Reliability refers to the ability to consistently produce a given result. In the context of psychological research, this would mean that any instruments or tools used to collect data do so in consistent, reproducible ways.
13.2K
Quality Assurance
208
Quality assurance is the overarching term used to describe the activities employed to ensure the proper performance of a system. These activities can be classified into three categories: quality control, quality assessment, and internal corrective measures. Typically, these activities work cyclically: quality control is performed before and during the analysis, while quality assessment occurs during and after the investigation. Internal corrective measures are implemented based on the findings...
208
Non-destructive Tests for Concrete Strength
195
The rebound hammer test, also known as the Schmidt hammer test, is a non-destructive technique for evaluating the hardness of concrete and, indirectly, the strength of concrete. It operates on the principle that the rebound of a spring-driven mass from a concrete surface correlates to the surface's hardness. The device comprises a mass within a tubular housing, a spring mechanism, and a plunger that strikes the concrete. Upon release, the energy imparted to the mass by the spring causes it...
195
Testing Water Quality
191
When the quality of water for concrete preparation is uncertain, its impact on the setting time of cement and compressive strength of mortar is assessed by comparison with de-ionized or distilled water benchmarks. American Society for Testing and Materials (ASTM) C1602 requires the setting times to be within 90 minutes of the control, British Standard (BS) 3146:1980 allows a 30-minute variance in the initial setting, while British Standards European Norm (BS EN) 1008 specifies initial setting...
191
Development of Analytical Methods
731
An analytical methodology can be divided into four sequential steps: technique, method, procedure, and protocol. A technique is a scientific principle that rationalizes a specific phenomenon through chemical measurements. Adapting a technique for analyzing a sample of interest is termed a method. The procedure outlines the directions for performing the analysis via an analytical method. The protocol is the detailed guidelines on the procedure, which should be strictly followed to obtain the...
731
