摘要
文章针对Web安全漏洞中的SQLI和XSS漏洞,介绍了针对这两种漏洞的防御技术,并提出了一种新型的入侵检测系统。该系统采用Curl类库和Web请求,通过API接口分析和检测来自Web应用程序的交互,利用IDS服务器检测应用程序检测攻击行为,存储入侵记录。该技术最大的优势是跨平台性,可应用于多种Web应用程序。
This paper introduces some techniques to detect and prevent against the SQLI and XSS vulnerabilities, which have been ranked at the top in Web application attack mechanisms. Also we develop a new intrusion detection system which analyses and detects the input interactions from the web applications via an API using Curl library and Web request, identifies whether the intrusion occurred or not and prevents it from attacking the web application, and then stores the attack in the intrusion log. The biggest advantage of this technique is that is can be used in a cross platform and several of Web applications.
出处
《信息网络安全》
2011年第12期51-53,共3页
Netinfo Security
基金
国家自然科学基金[40571128]
国家民委重点科研项目[Mzy02004]
湖北省教育厅科研项目[B20110804]
