SQL注入攻击及防御技术的研究  

SQL Injection and Defense Technology Research

作　　者：尹宏飞[1] 

机构地区：[1]黑龙江交通职业技术学院计算机教研室,黑龙江齐齐哈尔161000

出　　处：《智能计算机与应用》2013年第1期70-71,共2页Intelligent Computer and Applications

摘　　要：近年来,SQL注入攻击成为黑客攻击网站获取信息的主要技术手段,网站管理员要有效防御攻击就要了解SQL注入攻击的方法并采取相应的措施进行防御。就SQL注入攻击技术、SQL注入攻击的防御及基于ISAPI过滤器的防御系统进行了详细的研究,为有效防御SQL注入提供了方法及手段。In recant years, SQL injection become major technology means by which a hacker attacks website for acquiring information. To realize effective defense attacks, webmaster need know about SQL injection and take appropriate measures to conduct the defense. In this paper, SQL injection techniques, a detailed study arc carried out about SQL injection defense, as well as defense system based on ISAPI filter, which provide the methods and means of effective defense against SQL injection.

关 键 词：SQL注入 ISAPI 防御 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]