SQL注入攻击与检测技术研究  

SQL Injection Attack and Detection Technology

作　　者：张博[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《信息安全与通信保密》2010年第5期90-92,共3页Information Security and Communications Privacy

摘　　要：随着互联网的发展和普及,基于Web服务器语言和后台数据库模式的网站越来越多,其安全形势也日渐严峻,SQL注入是其中最具威胁的一类攻击。介绍了SQL注入攻击的原理与特点,分析了SQL注入攻击的一般过程和攻击方法,最后提出对该攻击的检测模型。实验证明,该检测模型对主流的SQL注入攻击具有较好的检测效果。With the development and popularization of the Internet,a number of web sites based on web Server Language and back- end database have occurred,and their security becomes more severe. This article describes the principles and characteristics of SQL injection attack,analyzes the general process and attack means of this attack,and proposes the attack detection method. Experiments show that the proposed model has good detection results against the main SQL injection attack.

关 键 词：SQL注入攻击 入侵检测 协议分析 关联分析 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]