基于Libra爬虫技术的Web漏洞检测方法研究

摘要

In the Internet era,Web services related to the user's life,work and learning and other fields,if it in effectively detect and repair vulnerabilities,the majority of users will face many potential security threats.Based on discussing the Libra crawler technology advantages,on how to use the Web vulnerability detection technology is analyzed,the results show that the URL list and construct perfect attack vectors database,crawling efficiency and accuracy can be guaranteed;the Libra crawler technology can dynamically grab the Web operation,so as to improve the detection effect of vulnerability.It improves the efficiency of Web patch repair,enhances the user experience for Web products,which have a certain reference value.%在互联网时代,Web服务涉及到用户生活、工作及学习等各个领域,如果不能够有效检测和修补漏洞,广大用户将面临多类潜在安全威胁.在讨论Libra爬虫技术优点的基础上,对如何运用该技术检测Web漏洞进行分析,结果表明:通过构建完善URL列表以及攻击向量生成库,爬取效率和准确率都可得到保障;Libra爬虫技术可以对Web操作行为进行动态抓取,从而改善漏洞检测效果.对改善Web漏洞修补效率、提升Web产品用户体验有一定参考价值.