基于SQL注入的Web渗透技术取证方法的研究

Research on the Method of Obtaining Evidence of Web Penetration Technology Based on SQL Injection

随着计算机网络相关技术的发展和进步,网络安全问题日益严重,网络数据受到了极大的威胁和挑战。论文主要介绍了SQL注入原理和常见的攻击方式,系统地分析了My SQL数据库的SQL注入方法,引入了SQL注入攻击的一些防御策略,针对Web攻击的行为介绍了日志取证的分析过程。

With the development and progress of computer network technology, the problem of network security becomes more and more serious. Network data has been a great threat and challenge. In this paper the principle of SQL injection and common attack methods are mainly introduced , SQL injection methods of the MySQL database are systematically analyzed, some defense strategy of SQL injection attacks are introduced, According to the behaviors of web attack , the analysis process of log forensics is presented too.