Java代码的安全性暴露及建议  

Security Exposure and Suggestions of Java Code

作　　者：吴国芳[1] 金伟立 WU Guo-fang, JIN Wei-li （Top Institute of Information ＆ Technology of Shaoxing, Computer Department, Shaoxing 312000, China）

机构地区：[1]浙江绍兴托普信息职业技术学院计算机系,浙江绍兴312000

出　　处：《电脑知识与技术》2007年第3期1264-1266,共3页Computer Knowledge and Technology

摘　　要：应用程序可能容易受到两类安全性威胁的攻击：静态和动态。虽然开发人员不能完全控制动态威胁，但在开发应用程序时，可以采取一些预防措施来消除静态威胁。静态暴露是系统中的缺陷，使系统暴露在想要篡夺该系统的特权的攻击者面前。本文概括，解释了13种类型的静态暴露，并具体给出处理安全性暴露问题的一些建议。Applications are easily to be attacked by two kinds of security threats, both static threats and dynamic threats. Although developers cannot totally control dynamic threats, they can take some measures in advance to eliminate static threats during development procedure. Static exposures are bugs in system which make the system expose to the front of attacks who want to usurp system level privilege. This thesis summarizes and explains 13 kinds of static exposures and proposes some suggestions for dealing with security exposure issues specifically.

关 键 词：安全性 暴露 JAVA 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论;自动化与计算机技术—计算机科学与技术]