选课管理系统的安全分析与防范研究  

A Security Study of Course-selecting and Management System Analysis and Precaution

作　　者：肖建芳[1] 陆深焕 廖华丽[1] 

机构地区：[1]汕头职业技术学院计算机系,广东汕头515078

出　　处：《湖南理工学院学报（自然科学版）》2013年第3期45-48,共4页Journal of Hunan Institute of Science and Technology(Natural Sciences)

基　　金：汕头职业技术学院科研基金一般课题(SZK2013Y07)

摘　　要：为了建设信息化校园,开发了一种公共选修课选课管理系统.该系统基于B/S三层结构和.NET技术开发,不仅能满足目前全院师生的选课和管理需求,还能针对穷举攻击、SQL注入攻击、XSS跨站攻击和文件上传攻击等常见的Web攻击进行防御和容忍,通过了多次公开测试,在2013年6月进行的全院师生网络选课的考验中表现良好.本文着重研究该系统的安全问题.实践证明,该系统基本性能良好,安全性较好.In order to construct informatizationed college campus, we designed the public Course-selecting and management system of Shantou Polytechnic. The system which based on B/S three layer structure and.NET technology, can not only meet the needs of the students and faculty selection and management on courses, but also can defense and tolerance the exhaustive attack, SQL injection attack, XSS cross-site attack and file upload attacks and other common Web attack, through a number of open test, the good performance of the students and faculty of network course in 2013 June test. This paper studied some security problems of the system, and the practice has showed that the system is of good performance, good safety.

关 键 词：选课管理系统 WEB安全 攻击 SQL注入 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]