期刊文献+

网络环境中XSS漏洞攻击与防御研究

Research on XSS vulnerability attack and defense in Network
下载PDF
导出
摘要 本文针对Web应用程序下的XSS漏洞攻击进行分析,以XSS攻击概念为切入点,对其漏洞分类、攻击形式进行分析,通过详细的理论论述谭涛涛出有效防御措施。 This paper for web applications of XSS exploits of analysis, to XSS attack concept as the starting point, on the vulnerability classification and the form of attack are analyzed.
作者 刘杰 葛晓玢
出处 《湖南城市学院学报(自然科学版)》 CAS 2016年第3期96-97,共2页 Journal of Hunan City University:Natural Science
基金 安徽省质量工程项目(项目编号:2013tszy061)
关键词 XSS漏洞 攻击形式 防御措施 XSS vulnerability Attack form Defense measures
  • 相关文献

参考文献3

二级参考文献18

  • 1王鹃,李俊娥,刘珺.一种基于Proxy的Web应用安全漏洞检测方法及实现[J].武汉大学学报(工学版),2005,38(5):135-140. 被引量:6
  • 2Johns M, Engelmann B, Posegga J. XSSDS: server-side detection of cross-site scripting attacks[C-I,//Proceedings of Computer Security Applications Conference. IS. 1. ] : IEEE, 2008..335 - 344.
  • 3Klein A. DOM based cross site scripting or XSS of the third kind[-JT. Web Application Security Consortium, 2005,4:59 - 64.
  • 4Jovanovic N, Kruegel C, Kirda E. Pixy.. a static analysis tool for detecting Web application vulnerabilities [J-]. IEEE, 2006,126..258-263.
  • 5Artzi S, Kiezun A, Dolby J, et al. Finding bugs in dynamic web applications E C ff Proceedings of the 2008 International Symposium on Software Testing and Analysis. [-S. 1. 1: ACM, 2008:261 -272.
  • 6Vogt P, Nentwich F, Jovanovic N, et al. Cross site scripting prevention with dynamic data tainting and static analysis[C]//Proceedings of the Network and Dis- tributed System Security Symposium (NDSS). New York, USA..[s. n. ], 2007..95 - 102.
  • 7Tang Zhushou, Zhu Haojin, Cao Zhenfu, et al. LWMxD: lexical based webmail XSS discoverer[,C] ff Proceedings of the First International Workshop on Security in Computers, Networking and Commu- nications. [-S. 1. ] : IEEE, 2008:976 - 981.
  • 8Ismail O, Etoh M, Kadobayashi Y. A proposal and implementation of automatic detection/collection system for cross-site scripting vulnerability [-C3 // Proceedings of the 18th International Conference on Advanced Information Networking and Applications. Washington, D.C. , USA: IEEE. 2004,129 - 136.
  • 9达斯孟;陆永忠;宁峰.客户端跨站脚本攻击的分层防御策略[M],20094.
  • 10FANGQI SUN,LIANG XU,ZHENGDONG SU. Client-Side Detection of XSS Worms by Monitiring Payload Propagation[A].2009.

共引文献16

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部