ASP网站网页挂马的危害分析及防范对策研究

Hazard Analysis and Preventive Measures on the ASP Website Pages Linked to Trojan

ASP是一种开发简单、功能强大的动态Web技术,通过Windows系统IIS提供WEB服务,许多政府、事业单位的网站都使用该语言进行开发.由于ASP自身及IIS存在安全隐患,网页挂马就是利用其漏洞进行攻击.网页挂马不仅对网站的安全运行造成威胁,而且对于用户来说,有可能造成个人信息泄露、各种账户及密码被窃取等严重影响.本文就网页挂马的运行原理、危害进行了详细地论述,并结合实践提出网页挂马的检测方法及预防对策.

ASP is a Web technology of developing simple and powerful dynamic,Windows IIS may provide Web services,the sites of many governments and institutions was developed by using the language.ASP and IIS there are security risks,the pages linked to Trojan attaked its vulnerability.Pages linked to Trojan not only pose threat for safe operation of the website,and seriously affected disclosure of personal information for the user,a variety of accounts and passwords stolen.In this paper,the operating principle of the pages linked to Trojan and hazards was discussed,combined with the practice,the pages linked to Trojan detection method and preventive measures was proposed.