网络设备HTTP服务安全威胁及其防范措施  

Security threats and counter measures related to HTTP of network devices

作　　者：倪平 张治兵 周开波 李莉 

机构地区：[1]中国信息通信研究院泰尔系统实验室,北京100191

出　　处：《现代电信科技》2016年第3期21-28,共8页Modern Science & Technology of Telecommunications

摘　　要：首先介绍了HTTP协议的基本概念和工作过程等,然后针对HTTP协议的特点,结合网络设备的固有特征,分析了网络设备HTTP所面临的安全威胁,并给出防御措施。This paper introduces the basic concepts and working process of the HTTP protocol and so on. Then based on the characteristics of the HTTP protocol, combined with the inherent characteristics of network devices, it analyzes the HTTP security threats faced by network devices, and gives defensive measures.

关 键 词：WEB HTTP 认证 会话管理 文件上传 

分 类 号：TN915.08[电子电信—通信与信息系统]