the assessment rather than simply sending a canned list of static strings at a web application the operation of the web application is analyzed to determine the filtering and acceptance characteristics of the web site as this information is ascertained a vocabulary of allowed symbols is created this vocabulary is used in the building of attack strings and as such the number of attack strings fired at the web application is greatly reduced as well as the number of false positives application_number US 56096906 A description the present invention brings a significant improvement to vulnerability assessment tools by employing the use of intelligent engine technology the present invention introduces technology that should significantly change how customers and analysts evaluate web application assessment products although the present invention does not render the use of static checks obsolete nonetheless the present invention provides a solution that improves the performance reliability and efficiency of web application assessment products in general the present invention utilizes a combination of intelligent engines and static checks to provide a thorough and efficient web application assessment product advantageously the present invention enables security professionals to complete assessments much faster virtually eliminate false positives and increase the number of true vulnerabilities discovered during the assessment good measuring sticks to compare the current state of the art static checking technology with.