跨站脚本攻击原理与防范  

Principle and Prevention of Cross-Site Srcipting Attack

作　　者：古开元[1] 周安民[1] 

机构地区：[1]四川大学信息安全研究所,四川610064

出　　处：《网络安全技术与应用》2005年第12期19-21,共3页Network Security Technology & Application

摘　　要：本文首先从静态网站和动态网站的区别出发,介绍了跨站脚本形成的原因和攻击的原理,然后说明了跨站脚本攻击所带来的危害,最后针对网站开发人员和网络用户提供了几种最为有效的防范和检测办法。This Paper firstly introduces the fact how a Cross-Site Scripting issue occurs and the principle how it comes to a real attack from the difference between static web sites and dynamic web sites,then illuminates what compromise it can bring out. In this paper,several available methods of prevention and detection are provided to vendor as well as user.

关 键 词：动态网站 HTML 跨站脚本 XSS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.092[自动化与计算机技术—计算机科学与技术]