AJAX模型的安全性分析与实现  

Analysis and Realization of the Security of AJAX Model

作　　者：霍迎秋[1] 尹秀珍[1] 

机构地区：[1]西北农林科技大学信息工程学院,陕西杨凌712100

出　　处：《微计算机信息》2009年第6期121-122,289,共3页Control & Automation

摘　　要：基于AJAX技术的Web应用中,AJAX引擎与服务器之间传输的是原始数据,非常容易受到"中间人"攻击,系统安全受到严重威胁。论文提出了一种基于D-H密钥交换算法和XXTEA加密算法的安全传输策略,通过对敏感数据进行加密传输来避免恶意实体的攻击,增强了AJAX系统模型的安全性。同时文章也对改进模型的性能及安全性做了分析。In the Web application based on AJAX technology, the original data transmitted between the AJAX engine and server is attacked by man-in-the-middle easily. The system＇s security is threatened seriously. An algorithm for transmitting safely based on D-H key exchange algorithm and xxtea encryption Algorithm is proposed. It enhances the model＇s security to encrypt private data and avoids the attack. At the same time the paper make an analysis of the model＇s security and efficiency.

关 键 词：AJAX引擎 安全 中间人 D—H XXTEA 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]