Being the model generation device for security inspection, the model survey instrument for security inspection, and the device which generates the model for security

摘要

PROBLEM TO BE SOLVED: To create a model specialized in the security inspection of a web application.;SOLUTION: An information input reception part 11 of this model generation device 1 receives an input of instruction information 10 such as the environmental information, security specification information, or specification information of the web application of an inspection target, a model construction part 13 constructs the model 2 performing a reduction attack procedure defined so that an effect of an attack is caused with the smaller number of procedures about an attack procedure causing the leading or compulsion of request transmission by an attacker page among procedures each comprising a plurality of requests/responses based on the instruction information 10, and a model output part 15 outputs the model 2. A model inspection device 3 performs model inspection by the model 2, and outputs an inspection result 4.;COPYRIGHT: (C)2009,JPO&INPIT