SQL Injection Defense Mechanisms for IIS＋ASP＋MSSQL Web Applications  

作　　者：Wu Beihua 

机构地区：[1]East China University of Political Science and Law, Shanghai 201620, P. R. China

出　　处：《China Communications》2010年第6期145-147,共3页中国通信（英文版）

摘　　要：With the sharp increase of hacking attacks over the last couple of years, web application security has become a key concern. SQL injection is one of the most common types of web hacking and has been widely written and used in the wild. This paper analyzes the principle of SQL injection attacks on Web sites, presents methods available to prevent IIS ＋ ASP ＋ MSSQL web applications from these kinds of attacks, including secure coding within the web application, proper database configuration, deployment of IIS. The result is verified by WVS report.

关 键 词：SQL injection web sites security CYBERCRIME 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术] TP393.08[自动化与计算机技术—计算机科学与技术]