Web應用防護技術在CMS中的應用與研究.pdf

1、⑨密級二殷分類號!￡墨Q魚萬鄉(xiāng)歹荸乒亨工程碩士學位論文Web應用防護技術在CMS中的應用與研究李麗指導教師趙莉教授李傳詠高級工程師申請學位級別三堡亟工程領域鹽笠墊墊盔2016年05月09日ApplicationandresearchofWebapplicationtechnologyinCMSDiscipline：ComputerTechnologyStudentSignature：SupervisorSignature：b乙￡乙、叩L

2、iAbstractTherapiddevelopmentofnetworktechnologyandnetworkplatform’Sandeaseofuse，whethercorporateorgovernmentauthorityorindividuals，havechosentousetheplatformtobuildtheirownsite，SOthatthenetworksecurityproblemincreasingly

3、highlightedIntheWebapplicationtherearemanyencodingloopholes，thecodeoftheseloopholesmakeswebserverbecomemorevulnerable，intheseattacks，morewidespread，brutishisSQLinjectionandXSSattacksInordertoensurethesafeuseofWebapplicat

4、ions，WebapplicationSecurityresearchhassignificanceandpracticalvalueisveryimportantThisstudybasedonacompany’SwebcontentmanagementsystemThepurposeistoperfectthesystemofWebapplicationsecuritysystem，andimprovingtheprotection

5、abilityAtterthestudyandfoundthatatpresentthesystemofwebapplicationsecurkyprotectionsystemofSQLinjectionattacksandcrosssitescriptingattackprotectionabilityisweakInthisregard，theneedforanexistingWebapplicationsecurityprote

6、ctionsystemtoincreaseSQLinjectionandcross—sitescriptingattackdetectionsubsystemInthispaperbasedontheanalysisofthepopularSQLinjectionandcrosssitescriptingattackprincipleanddetectiontechnologysummarizesthecharacteristicsof

7、theattackcode，putforwardthekeywordmatchingdetectionmethodcombinedwiththerulebase，atthesametimeinfrontofthewebapplicationlayercallsJDBCincreaseaSQLparsingmodule，enhancementofSQLinjectionprotectionThisdetectionsystembasedo

8、nB／Sarchitecture，bymultipledetectionmoduleclassifyingwebpagecodefile，recordtestresults，entrylogsheet，andissuedawarningmessageThroughtestandactualuse，thispaperdesignandimplementofSQLinjectionandcrosssitescriptingattackdet