In this paper we propose a framework supporting website security assessment. The idea of this framework is to integrate different scanning tools into the framework. We then write a program to implement this framework with a real website. We guide the users how to add a new scanning tool to this framework, manage it and generate a final report. In addition, we discuss the problem of security on client-side called clickjacking attack that many clients may suffer when accessing the malicious websites, we propose a method to protect them from this attack. |
