网络设备Web应用安全综述

The Web security of network devices

由于网络设备的研究难度大,安全关注程度低,安全研究人员尚未对路由交换设备的Web应用安全问题进行深入研究。经过分析发现,网络设备厂商在开发设备的Web服务器时一般会有两种选择:一是采用开源的轻量级Web服务器,二是开发自己的Web服务器。通过对这两类Web服务器都进行了研究和分析,发现其存在的安全问题各有特点。但是无论哪种类型的Web服务,都存在着严重的安全问题。

Security researchers have not made deep study in Web security of Network Devices（ND）, as the study is difficult and few concern on ND security. Analyses show two ways for ND manufacturer implementing Web server： one is using open source light Web server, another is developing its own Web server. This paper researched both type of Web servers, and found the security problems are different but serious.