摘要
针对Web遭受跨站脚本攻击越来越严重的问题,设计了一个基于指令集随机化的服务器端XSS检测和防御模型,并在PhpBB网络论坛系统中进行了实现,通过对实验结果的分析可知,本系统可以很好地检测和防御反射型XSS攻击和存储型XSS攻击,同时能检测和防御因网络或操作系统层漏洞导致的网页篡改和网页挂马等恶意攻击行为。
The authors design a XSS detection and prevention system aimed at solving the problem of website being attacked by increasingly sophisticated and severe cross site scripting. It is implemented with PhpBB forum using instruction set randomization techniques. According to the experimental result, our system not only can detect and prevent reflected XSS and stored XSS, but also can detect the attacks of web page defacement and website based Trojans caused by vulnerabilities from network or operating system layers.
出处
《电子技术（上海）》
2014年第4期8-11,共4页
Electronic Technology
基金
中央高校基本科研业务费专项资金(WK0110000007
WK2101020004)
高等学校博士学科点专项科研基金新教师类资助课题(20113402120026)
安徽省自然科学基金(1208085QF112)
安徽省高等学校优秀青年人才基金(2012SQRL001ZD)
关键词
跨站脚本
指令集随机化
代理
网页挂马
cross site scripting
instruction set randomization
proxy
website embedded by Trojan
