移动互联网web应用渗透测试的分析与应用-analysis and application of mobile internet web application penetration test.docxVIP

AbstractWith the rapid development of the mobile Internet and increasing intelligent of mobile terminal, people are tending to use much faster and easier mobile applications. But by accompany with the convenience, the mobile applications’ security issues have become increasingly prominent, such as the account being stolen and password being lost. Therefore, it is particularly important for us to research the security issues of the mobile Internet web application.With in-depth study and analysis of the existing penetration testing model, for the problem that existing test model is not applied to the mobile terminals and mobile web application vulnerability detection on the mobile Internet. Firstly, a testing model based on attack for web application on the mobile Internet tree is proposed in the paper ,and two attack tree models are respectively designed for the security of mobile terminal and web application. Secondly, the paper gives formal analysis of two attack tree models. Finally, a simple attack tree algorithm is given to prove the effectiveness of the attack tree model in the paper.Based on the above models, a penetration testing system for web application on the mobile Internet is designed and implemented in the paper, which includes several modules such as mobile terminal security vulnerability detection module, web security vulnerabilities found module, penetration testing module, penetration test case library, penetration testing tool library and so on. These function modules classify and manage their own content and do penetration testing by means of automated penetration testing tools. Further more, some actual test of mobile terminals and web applications on mobile banking is taken by using of the above-mentioned penetration testing system , and the testing result is also analyzed finally in the paper.Keywords:penetration testingweb applicationmobile Internetattack tree目录第一章 绪论..........................................................................