摘要
Web攻击方式日新月异,从2006年开始到2010年,平均每年都会有几十种新的Web攻击方式出现。这其中不乏新的Web攻击概念,以及从旧的Web攻击概念中引申出的新攻击手法。因此深入研究和积极跟进Web攻击方式是有必要的。这里在详细分析了基于操作劫持模式的Web攻击技术发展历程的基础上,将其划分为3个技术发展阶段,并对每个阶段的技术原理、技术特点和危害程度进行了深入的研究,给出了两种抵御操作劫持攻击的技术方法,并对比了两种方法在防护效果上的差异。
Web attack develops with each passing day, and from 2006 to 2010, dozens of new Web attack occurs on an average a year, many of them have no lack of new Web attack concept, and some attacks are even derived from the old concept of Web attack. So it is necessary to carry out in-depth study on Web attack. With detailed analysis on Web attack development process based on hijacking operation mode, its technology development is divided into three stages, the technology and principles, technical characteristics and harm degree of each stage are explored in-depth. Two technical methods are given in resistance of the clickjacking attacks, and their differences in protection are compared.
出处
《信息安全与通信保密》
2011年第1期86-89,共4页
Information Security and Communications Privacy
