Measuring Coverage of Application Inputs for Advanced Web Application Security Testing

A data processing system comprising:

• a bus;
• a storage device connected to the bus, wherein the storage device contains computer usable code for monitoring a black box web application security scan;
• a communications unit connected to the bus;
• and
• a processing unit connected to the bus, wherein the processing unit executes the computer usable code to initiate a black box scan of a web application, wherein a test is sent to a plurality of web application inputs of the web application;
• to perform a runtime analysis of the black box scan of the web application;
• and to modify the black box scan based on the run time analysis of the black box scan.

A computer usable recordable-type medium having a computer usable program code for monitoring a black box web application security scan, the computer usable program code comprising:

• computer usable program code for initiating a black box scan of a web application, wherein a test is sent to a plurality of web application inputs of the web application;
• computer usable program code for performing a runtime analysis of the black box scan of the web application;
• and
• computer usable program code for modifying the black box scan based on the run time analysis of the black box scan.