SQL注入式攻击防范研究  

Study on the Prevention of SQL Injection Attacks

作　　者：吴潇璇[1] 

机构地区：[1]南京师范大学信息化建设管理处,江苏省南京210000

出　　处：《阴山学刊（自然科学版）》2015年第4期37-41,共5页Yinshan Academic Journal(Natural Science Edition)

摘　　要：近几年来,信息化建设日趋成熟,业务的日常运转已经开始依赖于信息系统的支持。随着信息系统的广泛应用,信息系统的安全性问题就成为了热点课题。信息系统安全性最大的麻烦就来自于SQL注入式攻击(SQL Injection Attack)。尽管之前提出了处理SQL注入式攻击的各种方法,但是这些方法都具有很多局限性,大多数仅仅处理了SQL注入的一些问题。本文提出了一种效率高、安全性强又易于扩展的解决SQL注入式攻击的设计方案。With the development of web, more and more departments process their daily affairs through Inter- net. With the wide use of the information system, security becomes one of the key issues which directly affects the daily operation processes. Among all of attacks against the web application system, SQL injection attacks become a serious threat to the security of application system. Although before the proposed treatment of SQL injection attack methods, but these methods have many limitations. Most only deal with some problems of SQL injection. This pa- per presents a design scheme of high efficiency, high safety and easy to extend the solution of SQL injection at- tacks.

关 键 词：SQL 注入式攻击 安全模块 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]