XML安全技术分析与应用  

Analysis and Application of XML Security Technology

作　　者：顾韵华[1] 傅德胜[1] 王兴[1] 

机构地区：[1]南京信息工程大学计算机与软件学院,南京210044

出　　处：《计算机科学》2009年第5期118-120,141,共4页Computer Science

基　　金：江苏省产业技术研究与开发基金项目(苏发改高技发[2006]1106号)资助

摘　　要：随着XML的广泛应用,XML的安全性也越来越受到关注。从XML加密、XML数字签名和XML密钥管理等方面分析了XML应用中的安全技术框架与规范。在此基础上通过高校学院信息化平台的设计,给出了综合应用这些技术确保XML安全的模型与实现方法,并指出了在设计中需注意XML解析存在的安全问题及对策。With the wide application of XML,more and more attention has been paid to the security of XML code. The secure technical frame and the specification in XML application were deeply analyzed according to the XML encryption, XML digital signature and XML cryptographic management. The college information platform was designed based on the research above. Meantime,the model and the implement methods of XML security were ensured by the integrative application of the technology. Furthermore, the security problems existed in the XML analysis and the countermeasures which more attention should be paid to in the designing process were provided out.

关 键 词：XML应用 安全技术 XML加密 XML数字签名 框架与规范 对策 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]