Design of efficient web vulnerability scanner

The web applications are integral part of our day to day life. Almost everything is stored and manages on web. We use web applications for personal, commercial, and social purpose also. This omnipresence of web application makes them vulnerable. The increasing dependency on web applications have made them natural target for attackers. Injection attacks are most dangerous. To detect these vulnerabilities many researchers develop different approaches. This paper elaborates existing web vulnerability detecting approaches with their advantages and disadvantages. We propose a clustering approach to efficiently detect the SQL Injection, Xpath Injection and Cross Site Scripting attacks. The objective is to improve detection efficiency of vulnerability scanner while maintaining low false positive and false negative rate.