石油化工企业网络系统的SQL注入防御技术研究

Research on SQL injection defense technology of petrochemical enterprise network system

石油化工企业网络系统具有独立性和封闭性等特点。随着移动支付的兴起,石油企业网络不可避免的接入到各种外部网络里,而外部网络环境存在较大的网络安全隐患,极大增加了石油企业网络系统的安全风险。在各类网络攻击手段中,SQL注入攻击是网络系统最大的攻击来源。为保障石油企业网络系统的安全性和健壮性,针对石油企业网络系统面临的SQL注入攻击问题,分析了SQL注入攻击的类型和攻击特点,并提出了石油企业网络系统的SQL注入防御方案。

The network system of petrochemical enterprises has the characteristics of independence and closeness.With the rise of mobile payment,the network of petroleum enterprises is inevitably connected to various external networks.However,there are great hidden dangers in the external network environment,which greatly increases the security risk of the network system of oil enterprises.Among all kinds of network attack means,SQL injection attack is the biggest attack source of network system.To ensure the security and robustness of petroleum enterprise network system,aiming at the problem of SQL injection attack faced by petroleum enterprise network system,this paper analyzes the types and characteristics of SQL injection attack,and puts forward the SQL injection defense scheme of petroleum enterprise network system.