IIS日志在网站安全中的研究与应用  

Research and Application of IIS Log in Website Security

作　　者：杨方[1] 潘大丰[1] 

机构地区：[1]山西省农业科学院农业科技信息研究所,太原030031

出　　处：《农业网络信息》2010年第10期96-98,共3页Agriculture Network Information

基　　金：山西农村信息化技术综合服务与开发(2009年国家星火项目;编号2008GA630005);农村信息化网络综合服务平台关键技术研究(2008年山西省攻关项目;编号20080311090-2)

摘　　要：针对目前网站存在的安全威胁,结合山西农业科技信息网防黑客实战经验,深入剖析了网站挂马、SQL注入攻击行为特点,通过典型实例探讨了如何利用IIS日志检测恶意攻击行为,并提出相应解决措施。同时,指出IIS日志在监控攻击行为、检测网站漏洞、预防攻击等方面的技术策略,为网站管理人员提供了一种保护网站安全的思路。In order to tackle the current common threats from the website,in this paper,the feature of website imbedded trojan and SQL injection attack were analyze based on the practical anti-hacker experience of Shanxi Agriculture Science and Technology website and how to detect malicious attack were discussed using IIS Log and the corresponding solutions were proposed after a lot of practice,as well as the technical strategy of IIS Log in monitoring attack,testing website bug,taking precautions against attack,etc.,so as to offer a safe thinking method for website administrative staff.

关 键 词：IIS日志 网站挂马 SQL注入 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]