【作者】 李楠； 谷利泽； 钮心忻；

【Author】 LI Nan GU Li-ze NIU Xin-xin (Information Security Center,Beijing University of Posts and Telecommunications,100876)

【机构】 北京邮电大学信息安全中心；

【摘要】 本文提出了一种用于XSS漏洞扫描的网络爬虫设计方案,用广度优先搜索算法爬取URL队列、用bloom filter对URL去重、用序列化参数方法对可能存在XSS漏洞的链接进行二次去重,并使用了多线程技术。使得爬虫的搜索效果从时间效率和空间效率上得到优化,进而提高XSS扫描系统的效率。更多还原

【Abstract】 In this paper,design and implementation of a kind of web crawler used for XSS Scan is focused on.Relative technology of XSS and web crawler is firstly analyzed.Then a more efficient web crawler implementation plan for XSS Scan is given,using widthfirst search policy,bloom filter and serialization of parameters to remove duplicates.Multithreaded skill is also used.And the searching effect is optimized in both time-efficiency and space-efficiency,moreover,the efficiency of XSS scan system can be improved.更多还原