Analysis of Web Security Comprehensive Evaluation Tools

Web security evaluation is an important way for resolving Web security. This paper introduces the commonly used Web security comprehensive evaluation tools. Application examples and the comparison of their abilities are also given. Some inherent flaws in these tools which use the completely automatic method are analyzed. On this basis, we integrate black box and white box testing and propose a generic framework of Web security evaluation. As well as we propose ability criteria for this framework and the evaluation management methods in the application process.