摘要
SQL注入漏洞已成为当前Web应用程序的主要安全漏洞之一,其危害巨大,受到学术界和工业界的高度重视和广泛关注。首先对SQL注入漏洞的起因、漏洞注入方式及其危害进行了系统的概述,然后重点分析和比较了几种SQL注入漏洞检测技术的优缺点,之后归纳了三种在不同层次上抵抗SQL注入攻击的防御技术,最后在总结现有技术的基础上,指出了未来的研究重点和方向。
As one of the most important security risks in Web applications, SQL Injection Vulnerabilities causes great damage and attracts wide attention in both academic and industry field. This paper first gives a systematic introduction of the reasons for SQL Injection Vulnerabilities, injection technologies, its classification and threats; then analyzes and compares the pros and cons of technologies for SQL Injection Vulnerability detection; after summarizing many prevention methods for SQL Injection Attack in three different levels, a conclusion is reached and future research directions are pointed out at the same time.
出处
《计算机安全》
2010年第11期18-24,共7页
Network & Computer Security
关键词
网络安全
SQL注入攻击
SQL注入漏洞
检测与防御
Network Security
SQL Injection Attack
SQL Injection Vulnerability
Detection and Prevention
