Web應(yīng)用防護(hù)技術(shù)在CMS中的應(yīng)用與研究.pdf

1、⑨密級二殷分類號!￡墨Q魚萬鄉(xiāng)歹荸乒亨工程碩士學(xué)位論文Web應(yīng)用防護(hù)技術(shù)在CMS中的應(yīng)用與研究李麗指導(dǎo)教師趙莉教授李傳詠高級工程師申請學(xué)位級別三堡亟工程領(lǐng)域鹽笠墊墊盔2016年05月09日ApplicationandresearchofWebapplicationtechnologyinCMSDiscipline：ComputerTechnologyStudentSignature：SupervisorSignature：b乙￡乙、叩L

2、iAbstractTherapiddevelopmentofnetworktechnologyandnetworkplatform’Sandeaseofuse，whethercorporateorgovernmentauthorityorindividuals，havechosentousetheplatformtobuildtheirownsite，SOthatthenetworksecurityproblemincreasingly

3、highlightedIntheWebapplicationtherearemanyencodingloopholes，thecodeoftheseloopholesmakeswebserverbecomemorevulnerable，intheseattacks，morewidespread，brutishisSQLinjectionandXSSattacksInordertoensurethesafeuseofWebapplicat

4、ions，WebapplicationSecurityresearchhassignificanceandpracticalvalueisveryimportantThisstudybasedonacompany’SwebcontentmanagementsystemThepurposeistoperfectthesystemofWebapplicationsecuritysystem，andimprovingtheprotection

5、abilityAtterthestudyandfoundthatatpresentthesystemofwebapplicationsecurkyprotectionsystemofSQLinjectionattacksandcrosssitescriptingattackprotectionabilityisweakInthisregard，theneedforanexistingWebapplicationsecurityprote

6、ctionsystemtoincreaseSQLinjectionandcross—sitescriptingattackdetectionsubsystemInthispaperbasedontheanalysisofthepopularSQLinjectionandcrosssitescriptingattackprincipleanddetectiontechnologysummarizesthecharacteristicsof

7、theattackcode，putforwardthekeywordmatchingdetectionmethodcombinedwiththerulebase，atthesametimeinfrontofthewebapplicationlayercallsJDBCincreaseaSQLparsingmodule，enhancementofSQLinjectionprotectionThisdetectionsystembasedo

8、nB／Sarchitecture，bymultipledetectionmoduleclassifyingwebpagecodefile，recordtestresults，entrylogsheet，andissuedawarningmessageThroughtestandactualuse，thispaperdesignandimplementofSQLinjectionandcrosssitescriptingattackdet