基于Ajax的Web攻击及防御方法  

Web Attacks and Defense Methods Based on Ajax

作　　者：王竞超[1] 刘光耀[1] 

机构地区：[1]华北计算技术研究所航空信息系统部,北京100083

出　　处：《计算机与现代化》2012年第12期119-122,126,共5页Computer and Modernization

摘　　要：Ajax作为Web 2.0的核心技术,可以异步地向服务器发出请求并实现页面的局部刷新,已经成为开发Web应用的必备技术之一。伴随着此项技术的蓬勃发展,越来越多的安全问题也浮出水面。本文分析基于Ajax的几种Web攻击方式和防御方法,并对其中一种攻击进行实例分析,验证文中提出的防御方法的有效性。Ajax as a core technology of Web 2.0, can send request to server asynchronously and make partial page refresh, which has been an essential technology for developing Web applications. Along with this technology booming, more and more security issues also emerge. This paper analyzes several Ajax Web-based attack and defense methods, and carries out case analyses based on one of the attacks, to verify the effectiveness of the proposed defense methods.

关 键 词：AJAX WEB攻击 防御方法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]