浅析Cookies认证机制及其安全性  

Superficial Analysis of Cookies Authentication Mechanism and Its Security

作　　者：胡晟[1] 

机构地区：[1]华北电力大学,河北保定071000

出　　处：《计算机与网络》2012年第5期69-71,共3页Computer & Network

摘　　要：Web服务器生成Cookies并作为文本存贮于用户计算机硬盘或内存中,是实现Web应用认证的主要手段。本文分析了Cookie认证机制的实现过程与特点,并且论述了该认证机制易遭受的安全威胁以及安全需求,并给出实现安全Cookie认证的方法与措施。Web servers are able to generate Cookies and stored them in users＂ hard disks or RAMs as text messages.And it is the fundamental means for web application authentication.In this paper.We analyze the implementation process and characteristics of cookie-based authentication mechanism.We also discourse the security threats to cookie-based authentication mechanism-As well as the security requirements are proposed,we give the solutions of secure Cookies identification.

关 键 词：COOKIE 认证 信息安全 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]