IV. ANALYSIS MODEL
Web applications are composed of some pages and the
navigation links between these pages. A page includes
information which is exhibited to user and some links to
another pages. The model proposed here is a kind of
navigation model that demonstrates the navigation and
interaction pattern of web application. Links to the other web
sites are assumed as external links. External links are ignored
in the modeling process. [5]
A web page contains some information and any number of
HTML elements like forms. Each form includes some input
elements which are filled by users. The data provided by user
through navigating are gathered and submitted to the server.
The target of the submit link is always a dynamic page. The
dynamic pages are different in respect to the input values, and
they may differ from one value to another. Suppose a form
that gathers user interests, and shows additional information
about his interest. For example, if user interest is sport, it
shows a page containing additional information about sport.
Consequently, for exploiting all paths of web application, it
should produce all of the values that input variables could get.
Web exploiting process is divided into two phases, as follows:
• Phase 1: Static analysis of web application. In this phase
static structure of web application is constructed containing
static pages, static links, etc.
• Phase 2: Dynamic analysis, in the way just explained. Since
dynamic pages are hidden over the forms, in this phase input
1
WordNet is a large lexical database of English, developed under
the direction of George A. Miller.
http://wordnet.princeton.edu/