电子商务网站验证码安全性分析及设计

Security Analysis and Design for CAPTCHA of E-Commerce Website

目前电子商务网站主要关注密码的安全,对于验证码(也叫CAPTCHA,全自动区分计算机和人类的图灵测试)的安全问题并不是特别重视。文章详细对比分析了目前国内旅游相关企业的验证码安全性问题,证实了其安全性较弱,容易遭受攻击。有针对性地设计一种强干扰动态验证码,采用字符的变化形成强干扰背景。通过分析及模拟实验证明这种强干扰验证码是安全高效的。

Currently, e -commerce websites mainly special attention to security issues of verification code focu s on password security,and they do not pay （also known as CAPTCHA,Completely Automated Public Turing Test to Tell Computers and Humans Apart）. This paper analyzed CAPTCHA security issues of the current domestic tourism related businesses, and confirmed that its security is weak, vulnerable to attack. c CAPTCHA,which uses interfering background. Theoretical analysis and simulation experiments dynamic CAPTCHA is safe and efficient.