Model for Vulnerability Testing of Web-based Application
The paper described an approach for testing a web application for possible security flaws.An Environment and Status Fault model(EAS) is proposed,and our approach is based on it.We use the EAS model to classify 87 security flaws from the OWASP database,then we compare the classification results with that of using EAI model to classify flaws,and we also testing a web application PEGames using EAS model.The experiment revealed that the fault coverage of EAS model is high.