摘要
跨站脚本(Cross Site Scripting,简称XSS)是Web应用程序中常见的一种安全漏洞,它允许恶意的Web用户将代码植入到提供给其他用户使用的页面中,从而进行XSS攻击。在分析XSS存在形式、攻击过程和攻击原理的基础上,提出了一种基于网络爬虫的XSS漏洞检测方法,通过实验验证了其有效性。
The cross site scripting attack （Cross Site Scripting,XSS is the abbreviation） is a common security vulnerability of Web application.which attacks the client of accessing to server for a target,through the malicious script sending to the third sites of the users of sensitive information.This paper first analyses the cross site scripting attack forms of existence and attack process,and the principle of against,then designs a xss vulnerability detection method which based on Web crawler＇s,and its feasibility is verified by experiments.
出处
《电脑编程技巧与维护》
2012年第24期121-123,共3页
Computer Programming Skills & Maintenance
