浅谈ASP的安全漏洞与应对策略

Qinghai University For Nationalities,Department of Computer Science and Technology Vulnerabilities of ASP and Strategies

从ASP程序设计、数据库、防范远程注入三个方面对ASP的安全技术进行分析和总结,并指出ASP技术中存在的安全隐患。ASP是微软推出的服务器端脚本环境,它把脚本、HTML、ActiveX组件有机地结合在一起,形成动态、交互、高效的Web服务器应用程序,ASP+Access(或SQL)已成为很多人构建自己网上信息系统的首选方案。虽然ASP具有快速开发能力,由于ASP自身存在的安全漏洞,在编写程序的时候稍不小心就会给自己的网站留下很大的安全隐患。试图从ASP程序设计、数据库、防范远程注入三个方面对ASP的安全技术进行分析并提出建议。

ASP security environment analysis Abstract Article from the overall situation of the ASP system,from the Remote injection,database client,ASP Programming ASP three areas of security technology for the analysis and conclusion,and pointed out it's security problem.Introduction ASP is a Microsoft server-side scripting environment,it is the script,HTML,ActiveX components combined to form a dynamic,interactive and efficient Web server applications.ASP + Access(or SQL) program has become first enterprises to build their own online information system of choice for the program.Although the ASP has the ability to develop a web quickly,but for itself's security vulnerabilities,When writing programs in a little careless to their site will leave a great security risk.This paper attempts to client from the Remote injection,database client,ASP Programming ASP three areas of security technology for the analysis.