Weak password detection of Web application system based on webpage static analysis

TIAN Zheng; XUE Haiwei; TIAN Jianwei; QI Wenhui

English Version Reader LoginJournal Login

您当前的位置：

首页 >

文章列表页 >

Weak password detection of Web application system based on webpage static analysis

更新时间：2025-11-18

- Weak password detection of Web application system based on webpage static analysis
- Vol. 36, Issue 5, Pages: 47-50+64(2016)
- 作者机构：
  
  国网湖南省电力公司电力科学研究院
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2016
- 稿件说明：
移动端阅览
[1]田峥,薛海伟,田建伟,漆文辉.基于网页静态分析的Web应用系统弱口令检测方法[J].湖南电力,2016,36(05):47-50+64.

TIAN Zheng, XUE Haiwei, TIAN Jianwei, et al. Weak password detection of Web application system based on webpage static analysis[J]. 2016, 36(5): 47-50+64.
[1]田峥,薛海伟,田建伟,漆文辉.基于网页静态分析的Web应用系统弱口令检测方法[J].湖南电力,2016,36(05):47-50+64. DOI：

TIAN Zheng, XUE Haiwei, TIAN Jianwei, et al. Weak password detection of Web application system based on webpage static analysis[J]. 2016, 36(5): 47-50+64. DOI：

摘要

针对现有基于动态截取方式的Web应用账号弱口令检测方法操作繁琐、自动化程度较低

无法满足信息安全监督工作的需要。本文提出一种基于网页静态分析的Web应用系统弱口令检测方法

通过对登录页面的表单进行识别与分析

实现对登录关键信息的自动提取。基于此方法

实现了一个可对Web应用账号进行自动化弱口令检测的系统原型

并支持常见数字和字母组合的验证码识别。系统自动化程度较高

具有较好的实用性和应用前景。

Abstract

The existing weak password detection method based on dynamic intercept is of low complexity and low degree of automation

which can not meet the needs of information security supervision. In this paper

a weak password detection method based on the static analysis of webpage is proposed

which automatically extracts the key information of login process by identifying and analyzing the form of the login page. Based on this method

a system prototype which can automatically detect the weak password for Web application and supports captcha recognize of common digital and letter combinations is realized.The system has a high degree of automation

and has good practicability and application prospect.

关键词

Keywords

references

Views

110

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

AI问答

⁰