Web服务攻击技术研究  

Research of Web Services Attack Technology

作　　者：吴明峰[1,2] 张永胜[1,2] 李园园[1,2] 韩艳梅[3] 

机构地区：[1]山东师范大学信息科学与工程学院,山东济南250038 [2]山东省分布式计算机软件新技术重点实验室,山东济南250038 [3]聊城大学计算机学院,山东聊城252004

出　　处：《计算机技术与发展》2012年第1期213-216,共4页Computer Technology and Development

基　　金：山东省自然科学基金(ZR2011FM019)

摘　　要：Web服务具有平台无关性、动态性、开放性和松散耦合等特征,这给基于异构平台的应用集成带来极大便利,使越来越多的企业使用Web服务。Web服务技术在得到快速发展和应用的同时,它的安全问题越来越重要,成为黑客或者攻击者选择的目标,Web服务提供者对于保证Web服务安全要面临着严峻的考验。文中分析了Web服务攻击技术的特点、原理,讨论了用于攻击基于XML的Web服务的各种技术和目前比较流行的防御措施。进一步讨论了Web服务攻击将来的研究方向以及面临的挑战。Web service is characterized by its platform-independence, dynamic, openness and loose couplingl These characteristics greatly facilitate the application-to-application integration based on heterogeneous platform, that an increasing number of enterprise use it. Along with the development of Web services, its safe problem is more and more important. Web service art is attracting attackers and hackers to attack the Web services and the servers on which they run. Organizations are therefore facing the challenge of implementing adequate se- curity for Web services. It detailedly analyzed the characteristics and principle of various attacks on Web service, and pointed out the corresponding detection and prevention On the basis of current research achievements, also presented a discussion on the future research directions and the challenges of Web service defenses against attacks

关 键 词：WEB服务 攻击 安全 防御 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]