针对黑客渗透思维制定Web服务安全防护策略  

Developing Web services security strategy against hackers' penetrating thinking

作　　者：蒋巍 王杨[2] 齐景嘉 张明辉[2] 艾何洁[2] Jiang Wei;Wang Yang;Qi Jingjia;Zang Minghui;Ai Hejie(Harbin University of Finance,Department of Computer Science,HeilongjiangHarbin 150030;Harbin University of Finance,Network Information Center,HeilongjiangHarbin 150030)

机构地区：[1]哈尔滨金融学院计算机系,黑龙江哈尔滨150030 [2]哈尔滨金融学院网络信息中心,黑龙江哈尔滨150030

出　　处：《网络空间安全》2018年第5期45-49,共5页Cyberspace Security

基　　金：2017年度黑龙江省高教育教学改革研究重点委托项目(项目编号:SJGZ0027)

摘　　要：针对黑客扫描服务器系统和软硬件架构收集相关信息,利用收集的信息寻找漏洞获取权限,达到窃取或者破坏的目的,并掩盖踪迹留下后门攻击流程,总结了在与黑客对抗过程中,针对黑客渗透思维的Web服务安全防护策略,制定了一整套常用防范措施以保障服务器安全运行。This article collects information about the hacker scanning server system and the hardware and software architecture, uses the information collected to search for the permission of the vulnerability and achieves the purpose of stealing or destroying it, and covers the traces left behind the backdoor attack process, and summarizes the security prevention of the WEB service which is penetrated by the hacker in the process of confrontation with hacker. Protect the strategy. A set of commonly used precautionary measures has been worked out to ensure the safe operation of the server.

关 键 词：黑客 渗透思维 服务器 安全 

分 类 号：TP3-05[自动化与计算机技术—计算机科学与技术]