基于URL重写技术的SQL注入攻击防御方法  

Method of SQL injection attack defence based on URL rewriting technology

作　　者：崔雪冰[1] 王妍玲[1] 

机构地区：[1]河南城建学院计算机科学与工程系,河南平顶山467044

出　　处：《河南城建学院学报》2009年第3期61-64,69,共5页Journal of Henan University of Urban Construction

摘　　要：SQL注入攻击是近年来Internet网络上最流行的网站入侵方式之一,本文简要介绍了SQL注入攻击的原理,实现过程及一般防御手段,然后采用ASP.NET级的URL重写技术建立了一种针对SQL注入攻击的防御方法。The SQL injection attack is a most common Intemet website invasion method in the recent years. The theory of SQL injection attacks and the process of implementation and defensive measures are introduced in this paper. Then a kind of ASP. NET＇s URL Rewriting technology is used to estabhsh an defense policy for it.

关 键 词：网络安全 SQL注入攻击 URL重写 ASP.NET 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]