SQL注入攻击安全防护技术研究  

Research on SQL injection attack security protection technology

作　　者：王希忠[1] 吴琼[1] 黄俊强[1] 宋超臣[1] 

机构地区：[1]黑龙江省电子信息产品监督检验院,哈尔滨150090

出　　处：《信息技术》2014年第9期118-120,共3页Information Technology

摘　　要：随着数据库在Web中的广泛应用,SQL注入已成为黑客攻击数据库的常见手段。为有效预防SQL注入攻击,首先对SQL注入攻击的相关原理进行说明,针对目前SQL注入的攻击特点及其注入流程进行了剖析和研究,给出了几种可有效预防SQL注入攻击的防护方法,并对其最佳的使用情况进行了说明。With the wide application of database in Web, SQL injection has become the common ways of the hacker attacks against the database. In order to prevent SQL injection attacks effectively, it introduces the principle of SQL injection sttacks. And then it presents analysis and research of SQL injection attacks characteristics and injection process. Finally, it introduces several effective methods to prevent SQL injection attacks and describes the best use of these methods.

关 键 词：WEB应用 SQL注入 防护技术 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]