Amberate: A Framework for Automated Vulnerability Scanners for Web Applications

Abstract

Many new attacks targeting web applications have been showing up one after another. However, when implementing a new vulnerability detection technique, the existing vulnerability scanners impose a burdensome task of modifying source code and installing many auxiliary functions. In this paper, we introduce the design of Amberate; a web vulnerability scanner that alleviates the burden of them and makes it easier to develop a new vulnerability detection technique.