A study of static analysis on the web security detection

• Main Authors: Jian-Ting Lin, 林建廷
• Other Authors: Jong Yih Kuo
• Language: zh-TW
• Online Access: http://ndltd.ncl.edu.tw/handle/c8y5mc

碩士 === 國立臺北科技大學 === 資訊工程系研究所 === 103 === The online web application becoming more and more popular because its threshold of learning is getting easy, but this also appears security problem. Because of the lower threshold of learning, there are many developers lacking of security knowledge, causing the security hole in system, and most of java security detect tool has expensive licensing fees from market that makes developer can&;#39;t afford to it. This paper show a detect tool which expands open source project, Findbugs and PMD, to achieve security detect purpose, also design a platform for detection, let common developer will be able to detect web application by uploading to it, and makes sure application&;#39;s security quality.