摘要
论文主要介绍了针对符合RSS、Atom和XML标准的Web内容源(Feed)的几种攻击形式和防范对策,包括将内容源作为攻击媒介,与区域类型相关的风险,与阅读器类型相关的安全风险,将内容源作为攻击程序(exploits)的配置媒介,与Web内容源标准类型相关的安全风险。
This paper discusses various forms of attacks and defenses based on Web Feeds that follow the RSS, Atom and XML standards, including using Web Feeds as attack vectors, security risks by zone, reader type-specific risks, using Web Feeds as exploits deployment vector, security risks by standard.
出处
《信息安全与通信保密》
2008年第1期77-79,共3页
Information Security and Communications Privacy
