Web站点安全评估研究  

Study on Safety Assessment of Web Sites

作　　者：龙娟[1] 

机构地区：[1]广西政法管理干部学院信息工程系,广西南宁530022

出　　处：《通信技术》2011年第8期130-132,共3页Communications Technology

基　　金：湖南省高等学校科学研究计划资助项目(10C0142)

摘　　要：随着Web应用的日益广泛,它的安全性问题也不容忽视。很多的Web网站已有比较成熟的安全防范解决方案,但Web攻击事件的发生率却逐年上升。针对Web站点安全现状,在实施安全方案的同时,根据安全评估评价标准,定期、不定期对评估目标通过访谈、上机检查和工具测试等评估方式进行安全评估,可准确、及时掌握现阶段Web站点的网络安全现状,发现、消除Web站点中的安全隐患和漏洞,以确保Web应用的安全。With the widespread use of Web,its security should not be neglected.Many websites have their relatively mature security defense solutions.However,Web attack increases year after year.Based on website security status quo,the relevant security defense solutions are implementd.In accordance with the security assessment standard,the website security assessment is regularly or periodically carried out with proper security assessment approaches,such as interview of assessment objectives,on-line check tool testing,etc.,thus the exact and timely security situation of current website could be achieved,the potential safety hazards and bugs discovered and eliminated,and web application guaranteed.

关 键 词：WEB站点 安全目标 安全评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]