分析了Web 應用中存在的主要安全缺陷，設計了一種基于XML 的Web 應用安全缺陷特征庫模型—WAML，討論了WAML 的具體描述內容，并給出了Web 應用安全管理系統的設計方案。
關鍵詞：Web 應用；安全缺陷；WAML；XML
A Description Schema of Web Application Vulnerability Based on XML Ding Ni , Gu Yunhua (School of Computer and Software , Nanjing University of Information Science and Technology , Nanjing , Jiangsu , 210044) Abstract: The common vulnerabilities existed in the current Web applications are pointed out and the present description methods of vulnerability are analyzed. Thus WAML(Web Application? Markup Language)—a Web application description schema is designed based on XML and the specification of the module is discussed in detail.Then a model of Web Application Security Management System is discussed.
Keywords: Web Application; vulnerability; WAML; XML