期刊文献+

浏览器隐私信息存储与保护技术研究 被引量:2

Browser's Privacy Information Storage and Protective Technology
原文传递
导出
摘要 Web浏览器本地隐私信息通常包含用户保存的各类网站的用户名密码信息,通过一些恶意技术可以窃取用户计算机里所包含的各类用户名密码信息。由于浏览器本身认为系统用户是可信的,因此容易导致用户的用户名密码信息遭到窃取,并且难以防范。首先着重讲解了Web浏览器用户名密码等隐私信息存储方式,接着对获取敏感信息的常用方法做了工程上的实现,最后提出了几种保护浏览器敏感信息的思路和改进方法。 Web browser local privacy information usually contains the user's account number and password information of various Web sites, and through some malicious technology, all kinds of account password information stored on the user's compute could be stolen. The browser itself usually thinks that the system user is reliable, this fact would cause the user account password information to be stolen easily, and it is hard to prevent this kind of accident. This paper briefs the storage mode of Web browser user name password and other privacy information, and then describes the engineering implementation of commonly-used method for acquiring sensitive information, and finally proposes some ideas and improved methods in protecting the browser sensitive information.
出处 《信息安全与通信保密》 2013年第4期84-85,共2页 Information Security and Communications Privacy
关键词 Web浏览器密码 浏览器安全 密码解密 网络安全 Web browser password Web browsser security password decryption network security
  • 相关文献

参考文献8

二级参考文献29

  • 1王志军,孙月霞,张素庆,王文杰.基于Web开发的几种服务器端脚本语言的分析与比较[J].计算机应用研究,2006,23(3):14-16. 被引量:13
  • 2欧阳无敌@.渗透方法论之脚本篇[J].黑客防线,2007(7):33-35. 被引量:2
  • 3国家互联网应急中心.CNCERT/CC2008年上半年网络安全工作报告[EB/OL].[2009-05-04].http://www.cert.org.cn/UserFiles/File/CISR2008fh.pdf1.pdf.
  • 4HTTPOnly-OWASP. HTTPOnly[EB/OL]. (2009-08-15). [2009-08-15]. http://www. owasp. org/index. php/HTTPOnly#Browsers_ Supportin g_ HTTPOnly.
  • 5RSNAKE. XSS (Cross Site Scripting) Cheat Sheet Esp: for filter evasion [EB/OL]. (2009-08-15)[2009-08-15]. http://ha. ckers. org/xss. html.
  • 6NEXUS. Applying XSS to Phishing Attacks [EB/OL]. (2007-05-03) [2009-08-15]. http://www. xssed. com/article/5/Paper_ Applying _XSS _to _Phishing_Attacks/.
  • 7TIWARI S, BANSAL R, BANSAL D. Optimized Client Side Solution for Cross Site Scripting[J]. Networks, 2008(16):1.
  • 8HARTLEY D. Secure Ecommerce Web Application Design Principles Beyond PCI DSS[J].Computer Fraud & Security, 2009(06):13-17.
  • 9GOLLMANND. Securing Web Applications[J]. Information Security Technical Report, 2008(13):1-9.
  • 10Forte D. Anatomy of a Phishing Attack: A High-level Overview[J]. Network Security, 2009(04):17-19.

共引文献25

同被引文献14

引证文献2

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部