¹Information Technology Science College, Jinan University, Guangzhou, China
²Network and Education Technology Center, Jinan University, Guangzhou, China

---

Abstract—The number of Web controls’ security vulnerability surged with ever-changing varieties of attacks. Therefore this paper analyzes test model for Web controls’ vulnerability, and put forward a improved test model for Web controls’ vulnerability. Be aimed to test vulnerability of Web ActiveX controls combining static analysis and dynamic analysis, as well as put forward a proposal of optimizing the generation engine for test data using “heuristic rule”. Experiment results show that test model for Web controls’ vulnerability based on fuzzing is effective and feasible, and it is able to manipulate interaction problems.

Index Terms—Fuzzing test, Web controls, vulnerability test, vulnerability analysis

[PDF]

Cite: Guoxiang Yao, Quanlong Guan, and Kaibin Ni, "Test Model for Security Vulnerability in Web Controls based on Fuzzing," Journal of Software vol. 7, no. 4, pp. 773-778, 2012.