期刊文献+

Web中XSS攻击检测与防范措施 被引量:5

下载PDF
导出
摘要 XSS(跨站脚本)攻击,是恶意用户利用验证上的漏洞将脚本命令嵌入到可以显示的数据中,使其在另一个用户浏览时可以执行这些脚本命令.针对XSS漏洞屡遭攻击这一现状,通过对XSS漏洞的详尽分析,列举了对XSS漏洞攻击的检测方式和方法.根据攻击的特点,为系统的安全提出了相应的防御措施.
作者 王志春
出处 《通化师范学院学报》 2012年第8期27-29,共3页 Journal of Tonghua Normal University
  • 相关文献

参考文献5

二级参考文献18

  • 1古开元,周安民.跨站脚本攻击原理与防范[J].网络安全技术与应用,2005(12):19-21. 被引量:15
  • 2Martin M, Lam MS. Automatic generation of XSS and SQL injection attacks with goal-directed model checking. Proc. of the 17th Conference on Security Symposium Jul. 2008.
  • 3Kirda E, Kruegel C, Vigna G, Jovanovic P. Noxes: a client-side solution for mitigating cross-site scripting attacks. Proc. of the 2006 ACM Symposium on Applied computing Apr. 2006.
  • 4Jim T, Swamy P, Hicks PM. Defeating script injection attacks with browser-enforced embedded policies. Proc. of the 16th International Conference on World Wide Web May. 2007.
  • 5Grossman J. Cross-site scripting worms and viruses the Impending Threat and the Best Defense. APRIL 2006.
  • 6Karlof C, Shankar U, Tygar JD, Wagner D. Dynamic pharming attacks and the locked same-origin policies for web browsers. Proc. of the 14th ACM Conference on Computer and Communications Security (CCS 2007), November 2007.
  • 7National Vulnerability Database(NVD)[Z]. [2009-04-16]. http://nvd.nist.gov/home.cfm.
  • 8Paros[Z]. [2009-04-16]. http://www.parosproxy.org/index.shtml.
  • 9XSS-Me[Z]. [2009-04-16]. http://www.securitycompass.com/exploite.tml.
  • 10Auronen L. Tool-based Approach to Assessing Web Application Security[D]. Helsinki, Finland: Helsinki University of Technology, 2002.

共引文献29

同被引文献23

引证文献5

二级引证文献8

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部