ÔÙÈëÑ¡GartnerÓ¦ÓÃÇå¾²²âÊÔħÁ¦ÏóÏÞ
2017-03-02
¿ËÈÕ£¬¹ú¼ÊȨÍþ×Éѯ»ú¹¹Gartner Ðû²¼2017Äê¡¶Magic Quadrant for ApplicationSecurity Testing¡·(ÒÔϼò³ÆAST)±¨¸æ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼×÷Ϊһ¼Ò³§ÉÌÁ¬ÈÎÈëÑ¡¡£
±¨¸æÉæ¼°ÆóÒµÇàíùµÄWebÓ¦ÓÃÇå¾²ÆÀ¹ÀÀûÆ÷¡ª¡ª¾ÅÓÎÀÏ¸ç¿Æ¼¼WebÓ¦ÓÃÎó²îɨÃèϵͳ£¨WVSS£©£¬ÒÔ¼¿ÕÊÖúÆóÒµ¹¹½¨ÍêÉÆÍøÕ¾Ç徲ϵͳµÄÍøÕ¾¼à²âÀà²úÆ·¡ª¡ª¾ÅÓÎÀÏ¸ç¿Æ¼¼ÍøÕ¾Çå¾²¼à²âϵͳ(WSM)ºÍÍøÕ¾Çå¾²¼à²â·þÎñ¡£
±¨¸æÖ¸³ö£¬ÈôÊÇÆóÒµÔÚÕÒѰ¾ßÓоºÕùÁ¦µÄWebÓ¦ÓóÌÐòÇå¾²²âÊԵŤ¾ßºÍ·þÎñ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÖµµÃÑ¡Ôñ¡£ÔÚÖª×ãÆóÒµWebÇå¾²½¨ÉèÐèÇóµÄͬʱ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼»¹ÌṩÆÕ±éµÄ·þÎñÖ§³ÖºÍÏìÓ¦¡£WVSS ºÍWSMÌṩÁËÖÜÈ«µÄWebÓ¦ÓÃÇå¾²¼ì²â£¬¼ì²â¹æÄ£ÁýÕÖÉÌÓã¨COTS£©ºÍ¿ªÔ´×é¼þ¡¢Ó¦ÓóÌÐò£¬ÁýÕÖÁËÃÅ»§ÍøÕ¾£¬µç×ÓÕþÎñ¡¢ÂÛ̳ºÍµç×ÓÉÌÎñÓ¦ÓÃϵͳµÈ¡£±ðµÄ£¬WVSS »¹ÌṩÁ˾ßÓвο¼¼ÛÖµµÄ½»»¥Ê½¼ì²âÊÖÒÕ£¬ÌáÉýÁËÎó²î¼ì²âµÄ׼ȷÂÊ¡£
GartnerÑо¿ÒÔΪ£¬Ëæ×Å Web Ó¦ÓÃÇå¾²ÐèÇóµÄÔöÌíAST°²ÅźÍÄÜÁ¦Ò²Ôڳɱ¶ÔöÌí£¬ÆóÒµÇå¾²ÍŶÓÔÚ¾ÙÐÐWebÇå¾²½â¾ö¼Æ»®½¨ÉèʱÈÔÈ»ÐèҪ˼Á¿WebÇå¾²²úÆ·µÄÓÐÓÃÐԺͿÉÀ©Õ¹ÐÔ¡££Û1£Ý
×÷ΪÑÇÌ«µØÇøÒ»¼ÒͬʱÈëÑ¡Gartner×îÐÂÓ¦ÓÃÇå¾²²âÊÔºÍWAFħÁ¦ÏóÏ޵ij§ÉÌ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÌṩWVSS(ÑÇÌ«½ö´ËÒ»¼ÒÈëÑ¡2015ÄêGartnerÓ¦ÓÃÇå¾²²âÊÔħÁ¦ÏóÏÞ)ºÍWAF(º£ÄÚÈëÑ¡2016ÄêGartner WAFħÁ¦ÏóÏÞ)Áª¶¯½â¾ö¼Æ»®£¬Í¨¹ýÌṩ¡°Ò»¼üʽ¡±µÄÖÇÄܲ¹¶¡£¬ÊµÏÖÁË¡°¼ì²â¡±Óë¡°·À»¤¡±µÄÇå¾²±Õ»·ÖÎÀí¡£
¾ÅÓÎÀϸçWebÓ¦ÓÃÎó²îɨÃèϵͳ£¨WVSS£©ÊÇ»ùÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼¶àÄê¶ÔWebÓ¦ÓÃÇå¾²µÄÑо¿Óë»ýÀÛÑз¢µÄ²úÆ·¡£×ÔÉÏÊÐÒÔÀ´£¬½«Ò»Ö±µÄÁ¢ÒìÐÍÊÖÒÕ¼°¶ÔÓû§µÄʹÓÃÐèÇóÏàʶ¿ìËÙת»¯Îª²úÆ·ÄÜÁ¦£¬Êܵ½ÁËÓû§µÄÒ»ÖÂÈÏ¿ÉÓëºÃÆÀ¡£×÷Ϊº£ÄÚÊг¡ÁìÏȵÄWebÓ¦ÓÃÎó²îɨÃè²úÆ·£¬¾ÅÓÎÀϸçWVSSÒѾÁýÕÖ¶à¼ÒÆóÒµ»ú¹¹£¬ÆäÖаüÀ¨ÖйúÒÆ¶¯¡¢ÖйúµçÐÅ¡¢Öйú½¨ÉèÒøÐС¢ÖйúµçÁ¦¿ÆÑ§ÔºµÈ¾ÅÓÎÀϸçÍøÕ¾Çå¾²¼à²âϵͳ£¨WSM£©Äܹ»Æ¾Ö¤Õ¾µãÖÎÀíÕßµÄî¿ÏµÒªÇó£¬Í¨¹ý¶ÔÄ¿µÄÕ¾µã¾ÙÐв»ÖÐÖ¹µÄÒ³ÃæÅÀÈ¡¡¢ÆÊÎö¡¢Æ¥Å䣬Ϊ¿Í»§µÄ»¥ÁªÍøÍøÕ¾ÌṩԶ³ÌÇå¾²¼à²â¡¢Çå¾²¼ì²é¡¢ÊµÊ±¸æ¾¯£¬ÊǶà¼Òî¿Ïµ»ú¹¹µÄÍøÕ¾¼à²âÑ¡ÔñµÄ²úÆ·£¡¡°¾ÅÓÎÀϸçÍøÕ¾Çå¾²¼à²â·þÎñ¡±Ö÷Òª°üÀ¨ËÄ·½ÃæÄÚÈÝ£¬Å³ÈõÐÔ¼ì²â¡¢ÍêÕûÐÔ¼ì²â¡¢¿ÉÓÃÐÔ¼ì²âºÍÈÏÖ¤¼ì²â£¬Í¨¹ý·þÎñģʽ×ÊÖúÓû§ÌáÉýÍøÕ¾ÕûÌåÇ徲ˮƽ¡£
£Û1£ÝGartner¡°Magic Quadrant for Application Security Testing¡± by Dionisio Zumerle AyalTirosh February 28 2017.
About the Magic Quadrant Gartner does not endorse any vendor product or service depicted in its research publications and does not advise technology users to select only those endors with the highest ratings. Gartner research publications consist of the opinions of Gartner¡¯s research organization and should not be construed as tatements of fact. Gartner disclaims all warranties expressed or implied with respect to thisresearch including any warranties of merchantability or fitness for a particular purpose.

¾ÅÓÎÀϸçÔÆ







