基于加密技术的数据库防止SQL注入攻击的方法  

Based on the encryption method of the database to prevent SQL injection attacks

作　　者：王岩[1] 

机构地区：[1]长春工业大学人文信息学院,吉林长春130122

出　　处：《世界有色金属》2017年第7期121-122,共2页World Nonferrous Metals

摘　　要：SQL注入攻击已成为加密数据库被攻击的主要手段之一。文章主要简述了SQL注入攻击原理,对SQL注入攻击进行分类和简单介绍SQL注入攻击过程,对现实中遇到的SQL注入攻击结合常用的防御方法进行了深入研究。文章还提出一种方法,通过改变加密数据库数据和改变加密算法来改变所有用户的信息,同时还需要混乱记录用户输入的原意来进行SQL注入攻击的防御。SQL injection attacks have become encrypted database is one of the main means of attack. The paper mainly describes the principle of SQL injection attacks, classifying SQL injection attacks and simple introduction process of SQL injection attacks, in reality the SQL injection attacks in combination with the commonly used defense method were studied. The article also puts forward a method, by changing the encrypted database data and change the encryption algorithm to all users of information, at the same time also need chaos records entered by the user intent for defense of SQL injection attacks.

关 键 词：网络攻击 SQL注入攻击 数据库 防御 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]