Research on Scoring Method of WEB Application Vulnerability Scanning Product Performance Test

Abstract

False Positive Rate and False Negative Rate are two key indicators to evaluate the performance of WEB application vulnerability scanning products. Based on the research on the traditional scoring method of False Positive Rate and False Negative Rate, the improved test scoring method is proposed, and a more effective performance test scoring method which is based on the calculation method of risk value is designed in this paper. Assign values to vulnerabilities, and calculate the false positive and false negative through vulnerability weight.