Ajax应用安全研究  

Research on Security of Ajax Applications

作　　者：宣以广 

机构地区：[1]浙江省信息安全重点实验室,浙江杭州310007

出　　处：《信息安全与通信保密》2012年第1期80-83,共4页Information Security and Communications Privacy

摘　　要：Ajax可为Web应用提供丰富的事件和语义操作,正在成为互联网应用和企业信息系统开发的一种革命性技术。但是,如果对采用Ajax技术而导致Web应用体系结构的变化所引起的安全风险没有足够的重视,Ajax技术将可能使Web应用引入更多的内在安全风险。文中通过对Ajax技术原理的综述,分析了Ajax技术的安全隐患及其可能导致的各种安全漏洞,提出了Ajax应用的安全开发原则,最后讨论了支持Ajax应用安全评测的软件工具。Ajax can provide rich event and semantic operation for Web applications, and thus becomes a revolutionary technology in the development of Internet application and enterprise information system. However, if the great importance is not attached to the safety risk introduced by the usage of Ajax and resulted in the changes of Web application infrastructure, more intrinsic security problems would be introduced by Ajax in the Web application. Based on the technical review on Ajax, various kinds of possible security vulnerabilities on Ajax are analyzed, the safety development principles of Ajax-based applications proposed, and the state-of-art security test tools for Ajax discussed.

关 键 词：AJAX 安全漏洞 安全开发 安全评测 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]