Web应用漏洞攻击分析及防御实现  

作　　者：杨林[1] 杨勇[2] 

机构地区：[1]保山学院计算机科学系,保山678000 [2]云南大学信息与网络中心,昆明650021

出　　处：《中国教育网络》2011年第2期79-82,共4页China Education Network

摘　　要：针对当前Web应用漏洞攻击方面常见的SQL注入与溢出、ASP攻击与破坏,使得Web网站系统时刻都在面临着各种威胁,通过列举Web应用程序中不同的入侵漏洞及造成的危害程度,详细分析应用程序代码存在的不足及防范措施,试图从代码设计上提出解决漏洞修补的安全技术与方法,总结出一套完整的防御Web应用漏洞攻击的解决方案,确保整个网络应用服务系统的安全运行。Aiming at the current Web Application vulnerabilities and attacks such as SQL SQL injection and overflow, ASP attack and destroy which makes Web site systems suffering from a variety of threats, this paper lists the intrusion vulnerabilities and its harmful levels of Web applications and analyses the vulnerabilities of applications and prevention measures in detail. In this paper, we attempt to propose security techniques and methods to fix the vulnerabilities in the level of code desinning, and summarize a solution to defend Web application vulnerabilities, to ensure the secure operation of the entire network applications system.

关 键 词：WEB应用 SQL漏洞 ASP漏洞 防御方案 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]