{"title":"WEB应用漏洞扫描产品性能测试评分方法研究","authors":"Qicong Wu, Haohao Song, Ning Cao","doi":"10.1109/ICDSBA51020.2020.00095","DOIUrl":null,"url":null,"abstract":"False Positive Rate and False Negative Rate are two key indicators to evaluate the performance of WEB application vulnerability scanning products. Based on the research on the traditional scoring method of False Positive Rate and False Negative Rate, the improved test scoring method is proposed, and a more effective performance test scoring method which is based on the calculation method of risk value is designed in this paper. Assign values to vulnerabilities, and calculate the false positive and false negative through vulnerability weight.","PeriodicalId":354742,"journal":{"name":"2020 4th Annual International Conference on Data Science and Business Analytics (ICDSBA)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Research on Scoring Method of WEB Application Vulnerability Scanning Product Performance Test\",\"authors\":\"Qicong Wu, Haohao Song, Ning Cao\",\"doi\":\"10.1109/ICDSBA51020.2020.00095\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"False Positive Rate and False Negative Rate are two key indicators to evaluate the performance of WEB application vulnerability scanning products. Based on the research on the traditional scoring method of False Positive Rate and False Negative Rate, the improved test scoring method is proposed, and a more effective performance test scoring method which is based on the calculation method of risk value is designed in this paper. Assign values to vulnerabilities, and calculate the false positive and false negative through vulnerability weight.\",\"PeriodicalId\":354742,\"journal\":{\"name\":\"2020 4th Annual International Conference on Data Science and Business Analytics (ICDSBA)\",\"volume\":\"1 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2020-09-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2020 4th Annual International Conference on Data Science and Business Analytics (ICDSBA)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICDSBA51020.2020.00095\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 4th Annual International Conference on Data Science and Business Analytics (ICDSBA)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICDSBA51020.2020.00095","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Research on Scoring Method of WEB Application Vulnerability Scanning Product Performance Test
False Positive Rate and False Negative Rate are two key indicators to evaluate the performance of WEB application vulnerability scanning products. Based on the research on the traditional scoring method of False Positive Rate and False Negative Rate, the improved test scoring method is proposed, and a more effective performance test scoring method which is based on the calculation method of risk value is designed in this paper. Assign values to vulnerabilities, and calculate the false positive and false negative through vulnerability weight.