政府网站的安全隐患及常用攻击手段分析

Analysis on the security risks of the government Website and the common attack means

文章讨论了在互联网形势下政府网站安全的重要性,并结合实际情况分析总结出我国政府网站在遭受攻击后通常会出现的后果,即篡改页面、信息泄漏和网站瘫痪。随后文章还从技术方面剖析了WebShell,Cookies欺骗、缓冲区溢出、SQL注入、DDoS攻击等网络攻击者常用攻击方法的原理,并从操作和管理层面讨论了防范措施并给出相关建议。

This paper discusses the importance of government Website Internet security, combined with the actual situation, the author summarizes the consequences of the government Websites in China after the attack, which refers to tampering page, information leakage and Website paralysis. Then the article analyzes the WebShell, Cookies spoofing, buffer overflow, SQL injection, DDoS attacks and other attacks on the principles of network attackers commonly used through the aspect of technology. And the preventive measures are discussed from the aspects of operation and management.