B/S架构软件的安全性测试研究  

Research on Security Testing to B/S Structure Software

作　　者：郑雷雷[1,2] 宋丽华[1,2] 郭锐[1,2] 张建成[1,2] 

机构地区：[1]山东省计算中心,山东济南250014 [2]山东正中计算机网络技术咨询有限公司,山东济南250014

出　　处：《计算机技术与发展》2012年第1期221-224,共4页Computer Technology and Development

基　　金：山东省信息产业专项发展资金项目(2010X0125)

摘　　要：网络技术的发展使得以Web2.0为核心的应用越来越广泛,B/S架构软件的安全缺陷和漏洞不断增多,B/S架构的特殊性使得对B/S架构软件的安全性测试方法应不同于传统软件。文中描述了B/S架构软件的特点,对Web软件的安全性测试进行了分类,并详细阐述了测试要点和测试内容。从攻击者的角度,分析了Web软件常见的安全漏洞和测试方法。最后总结了当前研究工作并指出了未来软件安全性测试技术的研究重点与发展方向。Web 2.0 service applications are applied more and more widely based on network technology, the security flaws and vulnerabilities of B/S structure software are growing, the B/S structure software＇s security testing is different from the traditional software because of its own unique attributes. In this paper, firstly described the attributes of the B/S structure software, classified the content of its security testing, and then, elaborated the main testing points and context. From the perspective of attacker, analyzed the common Web services security vulnerabilities and the test methods. In conclusion, summarized the present study and pointed out future focus and devel- opment directions of software security testing technology.

关 键 词：WEB服务 B/S架构 安全性测试 安全漏洞 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]