Web安全威胁与防御技术研究  

Research on Web Security Threat and Defense

作　　者：王瑜[1] 李卓[2] 姚微娜[2] WANG Yu LI Zhuo YAO Weina(Faculty and Arts, Changchun University of Science and Techhnology, Changchun 130022 School of Computer Science and Technology, Changchun University of Science and Technology, Changchun 130022)

机构地区：[1]长春理工大学文学院,长春130022 [2]长春理工大学计算机科学技术学院,长春130022

出　　处：《长春理工大学学报（自然科学版）》2017年第2期135-139,共5页Journal of Changchun University of Science and Technology(Natural Science Edition)

摘　　要：Web应用广泛普及的同时,也带来了大量的安全威胁。本文分析了常见Web攻击:跨站脚本攻击、Flash攻击、跨站伪造请求攻击、APT攻击、DDoS攻击,从安全威胁的产生原因、常见攻击手段出发,总结了攻击者经常利用的Web安全漏洞,并提出了相应的防御措施和方法,对提高Web安全具有重要的参考价值。With the wide spread of Web application,a great number of security threats appear. In this paper,we first analyze common web attacks：XSS,Flash,CSRF,APT,DDoS attack. And then summarize the Web security vulnerabilities used often from the point of security season and attack measure,as well propose corresponding defense action,which generates important reference for improving Web security.

关 键 词：WEB安全 跨站脚本攻击 跨站伪造请求攻击 APT DDOS 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]