高校站群系统内置Web应用防火墙的Web攻击检测与防御研究

Research on Web Attack Detection and Defense of Web Application Firewalls Built into University Station Cluster Systems

高校部署内置Web防火墙的网站群系统应对SQL注入和XSS攻击。描述了SQL注入和XSS攻击的攻击方式;介绍了Web防火墙如何通过基于正则表达式的规则引擎和深度学习引擎对恶意代码进行检测、学习与防御;最后分析了攻击特征自动提取技术未来发展趋势。

Universities deploy website group system with built-in web firewalls to cope with SQL injection and XSS attacks from which the attack methods of SQL injection and XSS attacks are described.Meanwhile this paper also introduces how web firewalls detect,learn and prevent malicious code through rule engine based on regular expression and deep learning engine.Finally,the future development trend of attack feature automatic extraction technology is analyzed.