¾ÅÓÎÀÏ¸ç¿Æ¼¼ÑÇ̫ΨһÈëÑ¡GartnerÓ¦ÓÃÇå¾²²âÊÔħÁ¦ÏóÏÞ
2015-08-17
¿ËÈÕ£¬È«ÇòÁìÏȵÄÊÖÒÕ¼°×Éѯ¹«Ë¾GartnerÐû²¼ÁË2015ÄêÖØÁ¿¼¶¡¶Magic Quadrant for Application Security Testing¡·£¨ÒÔϼò³ÆAST£©±¨¸æ£¬ÄܽøÈëħÁ¦ÏóÏ޵ij§É̾ùÊǹú¼ÊÉÏ´ËÁìÓòµÄٮٮÕߣ¬¾ÅÓÎÀÏ¸ç¿Æ¼¼×÷ΪÑÇÌ«µØÇø³§É̱»ÄÉÈë¡£
´Ë´Î±¨¸æÖ÷ÒªÊǶÔÓ¦ÓóÌÐòÇå¾²ÐÔ²âÊÔ(AST)²úÆ·ºÍ·þÎñµÄÊг¡½ç˵¡¢´ú±í³§ÉÌ¡¢Êг¡Æ«Ïò¡¢ÆÀ¹À±ê×¼Ëĸöά¶È¶ÔÓ¦ÓóÌÐòÇå¾²²âÊÔÊг¡µÄÆÀ¹ÀºÍÆÊÎö¡£Ó¦ÓóÌÐòÇå¾²Îó²î²âÊÔ£¨AST£©°üÀ¨¾²Ì¬²âÊÔ£¨SAST£©£¬¶¯Ì¬²âÊÔ(DAST)£¬½»»¥Ê½²âÊÔ£¨IAST£©¼°Òƶ¯¶ËµÄ²âÊÔ¡£±¨¸æÖÐÉæ¼°µÄ²úÆ·ºÍ·þÎñÓк£ÄÚÊ׿îÍøÕ¾¼à²âÀà²úÆ·-¾ÅÓÎÀÏ¸ç¿Æ¼¼ÍøÕ¾Çå¾²¼à²âϵͳ£¨WSM£©¡¢ÆóÒµÓÅÑ¡WEBɨÃè²úÆ·-¾ÅÓÎÀÏ¸ç¿Æ¼¼WEBÓ¦ÓÃÎó²îɨÃèϵͳ£¨WVSS£©ºÍ¾ÅÓÎÀÏ¸ç¿Æ¼¼ÍøÕ¾Çå¾²¼à²â·þÎñ¡£
¾ÅÓÎÀϸçWEBÓ¦ÓÃÎó²îɨÃèϵͳ£¨WVSS£©ÊÇ»ùÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼¶àÄê¶ÔWEBÓ¦ÓÃÇå¾²µÄÑо¿Óë»ýÀÛÑз¢µÄ²úÆ·¡£×ÔÉÏÊÐÒÔÀ´£¬½«Ò»Ö±µÄÁ¢ÒìÐÍÊÖÒÕ¼°¶ÔÓû§µÄʹÓÃÐèÇóÏàʶ¿ìËÙת»¯Îª²úÆ·ÄÜÁ¦£¬Êܵ½ÁËÓû§µÄÒ»ÖÂÈÏ¿ÉÓëºÃÆÀ¡£×÷Ϊº£ÄÚÊг¡ÁìÏȵÄWEBÓ¦ÓÃÎó²îɨÃè²úÆ·£¬¾ÅÓÎÀϸçWVSSÒѾÁýÕÖ¶à¼ÒÆóÒµ»ú¹¹£¬ÆäÖаüÀ¨ÖйúµçÐÅ¡¢Öйú½¨ÉèÒøÐС¢ÖйúµçÁ¦¿ÆÑ§ÔºµÈ£¬½ñÄê¸üÒÔ¸÷¸öµãÅä¾ùΪ70%µÄÕ¼±ÈÊ×룬ÈëΧ¡°ÖйúÒÆ¶¯2014-2015ÄêWEBÎó²îɨÃè²úÆ·¼¯Öвɹº¡±ÏîÄ¿¡£¾ÅÓÎÀϸçÍøÕ¾Çå¾²¼à²âϵͳ£¨WSM£©Äܹ»Æ¾Ö¤Õ¾µãÖÎÀíÕßµÄî¿ÏµÒªÇó£¬Í¨¹ý¶ÔÄ¿µÄÕ¾µã¾ÙÐв»ÖÐÖ¹µÄÒ³ÃæÅÀÈ¡¡¢ÆÊÎö¡¢Æ¥Å䣬Ϊ¿Í»§µÄ»¥ÁªÍøÍøÕ¾ÌṩԶ³ÌÇå¾²¼à²â¡¢Çå¾²¼ì²é¡¢ÊµÊ±¸æ¾¯£¬Êǹ¹½¨ÍêÉÆµÄÍøÕ¾Ç徲ϵͳµÄÔö²¹£¬ÊǶà¼Òî¿Ïµ»ú¹¹µÄÍøÕ¾¼à²âÑ¡ÔñµÄ²úÆ·£¡¡°¾ÅÓÎÀϸçÍøÕ¾Çå¾²¼à²â·þÎñ¡±Ö÷Òª°üÀ¨ËÄ·½ÃæÄÚÈÝ£¬Å³ÈõÐÔ¼ì²â¡¢ÍêÕûÐÔ¼ì²â¡¢¿ÉÓÃÐÔ¼ì²âºÍÈÏÖ¤¼ì²â£¬Í¨¹ý·þÎñģʽ×ÊÖúÓû§ÌáÉýÍøÕ¾ÕûÌåÇ徲ˮƽ¡£
¹ØÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾£¨¼ò³Æ¾ÅÓÎÀÏ¸ç¿Æ¼¼£©½¨ÉèÓÚ2000Äê4Ô£¬×ܲ¿Î»ÓÚ±±¾©¡£ÔÚº£ÄÚÍâÉèÓÐ30¶à¸ö·ÖÖ§»ú¹¹£¬ÎªÕþ¸®¡¢ÔËÓªÉÌ¡¢½ðÈÚ¡¢ÄÜ Ô´¡¢»¥ÁªÍøÒÔ¼°½ÌÓý¡¢Ò½ÁƵÈÐÐÒµÓû§£¬Ìṩ¾ßÓн¹µã¾ºÕùÁ¦µÄÇå¾²²úÆ·¼°½â¾ö¼Æ»®£¬×ÊÖú¿Í»§ÊµÏÖÓªÒµµÄÇ徲˳³©ÔËÐС£
About
the Magic Quadrant
Gartner does not
endorse any vendor product or service depicted in its research publications and
does not advise technology users to select only those endors with the highest
ratings. Gartner research publications consist of the opinions of
Gartner¡¯s research organization and should not be construed as tatements
of fact. Gartner disclaims all warranties expressed or implied with
respect to this research including any warranties of merchantability
or fitness for a particular purpose.

¾ÅÓÎÀϸçÔÆ







