An Effect Evaluation Model for Vulnerability Testing of Web Application

In this paper, we propose a security evaluation model for the web application and define a security evaluation function based on the Analytic Hierarchy Process (AHP) to describe the model. We use the evaluation method proposed by this paper to evaluate the vulnerability test effect of a BBS application named IPB. The experiment result reveals that the evaluation value calculated by the security evaluation function is positively correlated with the number of vulnerabilities found in the security test. It proves that the security evaluation method proposed by this paper is practical and reliable.