基于Web会话管理漏洞检测技术的研究  

Research on Web-based Session Management Vulnerability Detection Technology

作　　者：谢品章 曾德生[1] 庞双龙 XIE Pinzhang;ZENG Desheng;PANG Shuanglong(Department of Information Engineering,Guangdong Innovation and Technology Vocational College,Dongguan 523960,Guangdong,China)

机构地区：[1]广东创新科技职业学院信息工程学院

出　　处：《智能计算机与应用》2019年第6期322-326,331,共6页Intelligent Computer and Applications

基　　金：广东创新科技职业学院2018年科研项目(2018XJYB027);2018年度广东省普通高校重点科研平台和科研项目(2018GkQNCX065)

摘　　要：WEB会话管理涵盖了从登录到离开WEB应用程序的所有用户控制,在提高应用的易用性和友好性方面发挥了重要作用,同时也增加了在无须提供正确凭证就能非法访问WEB应用程序的风险。本文首先对WEB会话管理漏洞进行详细分析,针对不同类型的WEB会话管理漏洞设计相对应的检测方法,并在此基础上提出WEB会话管理漏洞的防范措施。Web session management covers all user control from login to leave the Web application. It plays an important role in improving the usability and friendliness of the application. It also increases the risk of illegal access to the Web application without providing correct credentials. Firstly we make a detailed analysis of the Web session management vulnerabilities,then according to different types of Web session management vulnerabilities,corresponding detection methods are designed,and on this basis the prevention measures of Web session management vulnerabilities are proposed.

关 键 词：WEB安全 会话管理 漏洞检测 防范措施 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]