基于.NET的应用访问数据库的安全  

Security of Access the Database Based on the.NET

作　　者：雷聚超[1] 李博博[1] 

机构地区：[1]西安工业大学计算机科学与工程学院,西安710021

出　　处：《电脑编程技巧与维护》2014年第16期129-130,141,共3页Computer Programming Skills & Maintenance

摘　　要：确保应用程序的数据安全不被攻击,在通过各种技术手段加强数据库的安全的同时,也应该重视安全的访问数据库。在分析引起数据泄漏的最常见的SQL Injection的方法之上,结合ASP.NET的特性从程序中的构造查询语句,限定访问权限和视图,以及LINQ查询技术等角度分析了在.NET框架下更加安全地访问SQL Server数据库,防止SQL注入攻击等安全漏洞,提高应用程序的安全性。How to ensure the safety of the application program data not being attacked, through various technical means to improve the security of the database at the same time, also should pay attention to the safety of access databases. Articles on the most common SQL Injection methods to analyze data leakage caused by the combined features of ASP.NET from the program structure of the query, and limited access to view, and LINQ query technology point of view of how the. NET Framework under a more secure access to the SQL Server database to prevent SQL injection attacks and other security breaches, improve the security of the application program.

关 键 词：ASP NET平台 数据库 安全 SQL Injection方法 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]