长江黄金邮轮网站的安全设计  

Security design of Yangtze gold cruises website

作　　者：谭华山[1] 杨有[1] 余平[1] 

机构地区：[1]重庆师范大学计算机与信息科学学院,重庆沙坪坝401331

出　　处：《重庆文理学院学报（自然科学版）》2011年第6期52-56,共5页Journal of Chongqing University of Arts and Sciences

基　　金：重庆师范大学博士基金项目(10XLB006);重庆市教委科研项目(KJ100623;KJ110629)

摘　　要：长江黄金系列邮轮陆续下水,越来越多的国内外游客将体验长江黄金系列邮轮带来的旅游价值.其邮轮网站将在企业宣传和票务营销方面发挥更加突出的作用,网站安全设计至关重要.通过对当前网站安全隐患的分析,描述了解决网页内容免受黑客木马攻击的替换算法,并给出对应程序段;改进了口令认证方式,并指出MD5加密能够提高数据库的安全性;提出了程序验证方式,能够有效防御SQL注入式攻击在用户身份认证时发生.该网站的安全设计可为类似网站建设提供参考意见.The serial of yangtze gold cruises lunched,and more and more travelers will enjoy the tourism value because of Yangtze gold cruises.The www.Yangtzegoldcruises.com is so important because it plays a prominent role in enterprise news releasing and ticket selling.Based on the analysis of common web security defects,some web design considerations about web data security and user identity authentication were pointed out.A substitute algorithm and its program used in web data were described.SQL injection attack（SIA） to web data couldn＇t operate due to the using of this algorithm.Values generated by MD5 algorithm was added to username and password,for the goal to ensure the user table storing security.To resist SQL injection attach while identity was authenticating,a method called program authentication was proposed.These safety measures or considerations may benefit to similar web design.

关 键 词：长江黄金邮轮 网站安全 SQL注入式攻击 替换算法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]