智慧旅游视域下跨站脚本攻击防范策略  

Cross Site Script Attack Prevention Strategy from the Perspective of Smart Tourism

作　　者：曹洋瑞 谭凌霄 袁晓维 CAO Yangrui;TAN Lingxiao;YUAN Xiaowei(School of Information and Engineering,Sichuan Tourism University,Chengdu Sichuan 610100)

机构地区：[1]四川旅游学院信息与工程学院,四川成都610100

出　　处：《河南科技》2021年第33期22-24,共3页Henan Science and Technology

基　　金：2021年度四川旅游学院大学生科研项目“智慧旅游视域下XSS攻防技术的研究与应用”(2021XKZ54)。

摘　　要：随着计算机网络技术不断进步和发展,各类各式网站层出不穷,网站安全需求日益增加。在大旅游背景下,旅游类网站逐渐成为众多景区信息化的方式之一。XSS漏洞是目前Web 2.0时代最主要的计算机安全漏洞。本文将分析XSS漏洞的主要特点以及攻击方式,并与旅游类网站特性相结合,构建旅游类网站XSS漏洞防御策略。With the continuous progress and development of computer network technology,all kinds of websites emerge in endlessly,and the ever-increasing demand for website security is quickly by day.In the context of largescale tourism,tourism websites have gradually become one way of informatization in many scenic spots.XSS vulnerability is the most important network security vulnerability in the current Web 2.0 era.This paper analyzed the main characteristics and attack methods of XSS vulnerabilities,and combined with the characteristics of tourism websites to build XSS vulnerability defense strategies for tourism websites.

关 键 词：XSS 智慧旅游 信息安全 WEBSITES 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]