NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Web Application Scanners: Definitions and Functions
Published
Author(s)
Elizabeth N. Fong, Vadim Okun
Abstract
There are many commercial software security assurance tools that claim to detect and prevent vulnerabilities in application software. However, a closer look at the tools often leaves one wondering which tools find what flaws? This paper identifies a taxonomy of software security assurance tools and focuses on the definition of one type of tool: web application scanner - an automated program designed to examine web applications for security vulnerabilities. The types of functions that are generally found in a web application scanner are described.
Proceedings Title
Hawaii International Conference On System Sciences (HICSS) | 40th | | University of Hawaii College of Business
Conference Dates
January 3-6, 2007
Conference Title
Hawaii International Conference on System Sciences
Fong, E.
and Okun, V.
(2007),
Web Application Scanners: Definitions and Functions, Hawaii International Conference On System Sciences (HICSS) | 40th | | University of Hawaii College of Business
(Accessed October 10, 2025)