基于验证码破解的HTTP攻击原理与防范  

Principles and Prevention of HTTP Attacks Based on Identifying Code Recogniztion

作　　者：吉治钢[1] 

机构地区：[1]网易互动娱乐有限公司,广州510665

出　　处：《计算机工程》2006年第20期170-172,共3页Computer Engineering

摘　　要：为防止基于表单自动提交的HTTP攻击,验证码技术得到了广泛应用。论文对常见的几种验证码形式作了简要介绍,讨论了验证码的破解原理,实验表明,互联网上相当多的验证码都不具有可靠的安全性。最后结合OCR技术探讨了一些防范方法。To avoid HTTP attacks using automatic form-committing, the identifying code technique is widely used. A brief introduction of the types of identifying code techniques and its application is given. The principles of recognizing and attacking are discussed. Primary experiments suggest that quite a lot of identifying codes are not secure enough. Finally, some methods and schedules with OCR techniques for prevention are proposed.

关 键 词：验证码 HrrP攻击 INTERNET安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]