Design And Implementation Of Web Security Analyse System

As the Internet becomes popular, more and more Web systems are embeded in Internet, including BBS, e-shop, e-bank and so on, and people depend on them increasingly. However, due to the open property of Internet and to the incomplete design of information and system security, web threat and intrusion is emerging in endlessly. In addition, Web syetem is confronted with a lot of potential attackers because it can be visited by mostly Internet users. Web system becomes a very attracting punching bag for attackers by all these factors. So Web system is high risk at any time which brings on many troubles to people's daily and commercial life. Now people pay lots of attention on Web security.Based on these situations, this paper proposes a Web security analysis system which will fulfill common requests of current Web security analysis. This system integrate static and dynamic scan patch, introduce questionnaire mode, estimate secrurity threats and their degree of Web system itself, and advance professional advice according to the evaluation results. Then system developer and maintainer can complete Web system according to the advice and promote security of Web system.This paper also introduce Web system threats and currently Web security scan technique, advance a Web security analysis system, and put forward the system's design and implementation.