节点文献
网络环境下SQL注入攻击常见方法和防御策略研究
The research of common method and defense strategy of SQL injection attack on the network
【Author】 Wang Ni-Hong,Fang Zhou (Northeast Forestry University information and computer engineering college, Harbin 150040)
【机构】 东北林业大学信息与计算机工程学院;
【摘要】 本文主要针对当今网络面临的数据库注入(也称SQL注入)问题,以SQL注入的基本原理以及常用的攻击方式为基点,全面的叙述了针对数据库注入攻击的各种较为流行的解决方案,并且深入地分析了各种解决方案的利弊,并提出了一种新的SQL注入攻击的防御模型。
【Abstract】 This paper pours into problem mainly according to the database injection (also call SQL injection) that present network environment is faced with, with database the basic principle as well as general attack way that poured into are basic point, overall have narrated SQL injection attack various relatively popular solving schemas, have analyzed the advantages and disadvantages of various methods further, and have put forward a kind of new defense model of attack of SQL injection.
【Key words】 SQL injection; network security; database attack; defense model; network invading;
- 【会议录名称】 黑龙江省计算机学会2007年学术交流年会论文集
- 【会议名称】黑龙江省计算机学会2007年学术交流年会
- 【会议时间】2007-08
- 【会议地点】中国黑龙江哈尔滨
- 【分类号】TP393.08
- 【主办单位】黑龙江省计算机学会