Research Article

Performance-Based Comparative Assessment of Open Source Web Vulnerability Scanners

Table 6

Scanners’ detection accuracy of XSS attacks.

Scanner Version TPR TNR FPR FNR PPV NPV FOR Accuracy -measure

Arachni 0.4.3 64.38% 100% 0% 35.62% 100% 21.21% 78.79% 67.50% 78.33%
Arachni 1.0.2 87.67% 100% 0% 12.33% 100% 43.75% 56.25% 88.75% 93.44%
Wapiti 2.3.0 61.64% 57.14% 42.86% 38.36% 93.75% 12.50% 87.50% 61.25% 74.38%
Skipfish 2.1 86.30% 100% 0% 13.70% 100% 41.18% 58.82% 87.50% 92.65%