从黑客思维谈Web渗透性测试  

Web permeation test from hacker thinking

作　　者：巨腾飞 王楠 赵少飞 Ju Tengfei;Wang Nan;Zhao Shaofei(Shaanxi Province Network and Information Security Evaluation Center,Shaanxi Xi ＇an710065)

机构地区：[1]陕西省网络与信息安全测评中心,陕西西安710065

出　　处：《网络空间安全》2018年第4期62-64,共3页Cyberspace Security

摘　　要：随着进入Web3.0时代,网站功能越趋复杂,尤其是互联网的广泛普及和应用,如电子政务、电子商务、网络办公、网络媒体以及虚拟社区的出现,正深刻影响着人类生活、工作的方式。与此同时,Web安全的重要性也在不断提升。网站功能越复杂就意味着更多的漏洞暴露于互联网之上,政府、企业各类组织所面临的Web安全问题越来越多样化、复杂化,黑客威胁正在飞速增长,给企业的信息网络造成严重的破坏甚至于不可挽回的损失。为了更好地应对这些更加复杂的黑客攻击,模拟黑客思维开展渗透性测试,找出网站所存在的脆弱性,更好地了解网站本身,以助于网站管理者更好地解决安全隐患。With the advent of Web3.0, the functions of websites have become more and more complicated.In particular, the widespread adoption and application of the Internet, such as the emergence of e-government, e-commerce, online office, online media, and virtual communities, are profoundly affecting the way people live and work.. At the same time, the importance of Web security is constantly increasing.The more complex the website function means more vulnerabilities are exposed on the Internet. The Web security issues faced by various organizations of governments and enterprises are becoming more and more diversified and complicated. The threat of hackers is growing at a fast rate, causing the information network of enterprises to increase. Serious damage is even irreversible. In order to better deal with these more sophisticated hacking attacks, simulated hacker thinking to develop permeability tests, find the site＇s existing vulnerability, and better understand the site itself, to help website managers better solve security risks.

关 键 词：网站 黑客 渗透性测试 脆弱性 

分 类 号：TP306.2[自动化与计算机技术—计算机系统结构]