Secuobs.com : 2012-07-17 01:58:52 - SecurityTube.Net - Table of Contents 1 Introduction 2 List of Tested Web Application Scanners 3 Benchmark Overview Assessment Criteria 4 A Glimpse at the Results of the Benchmark 5 Test I - Scanner Versatility - Input Vector Support 6 Test II Attack Vector Support Counting Audit Features 7 Introduction to the Various Accuracy Assessments 8 Test III The Detection Accuracy of Reflected XSS 9 Test IV The Detection Accuracy of SQL Injection 10 Test V The Detection Accuracy of Path Traversal LFI 11 Test VI The Detection Accuracy of RFI XSS via RFI 12 Test VII - WIVET - Coverage via Automated Crawling 13 Test VIII Scanner Adaptability - Crawling Scan Barriers 14 Test IX Authentication and Usability Feature Comparison 15 Test X The Crown Jewel - Results Features vs Pricing 16 Additional Comparisons, Built-in Products and Licenses 17 What Changed 18 Initial Conclusions Open Source vs Commercial 19 Verifying The Benchmark Results 20 So What Now 21 Recommended Reading List Scanner Benchmarks 22 Thank-You Note 23 FAQ - Why Didn't You Test NTO, Cenzic and N-Stalker 24 Appendix A List of Tools Not Included In the Test IMAGE
↧