1、南京理工大學(xué)碩士學(xué)位論文針對SQL注射攻擊的一種集成防御策略姓名：殷正國申請學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：嚴(yán)悍20070528碩士論文針對SQL注射攻擊的一種集成防御策略AbstractTheSQLInjectionAttackisamostpopularInmetwebsiteinvasionwayintherecentyears，ThetechniquethatSQLInjectionAttackusesistheSQ

2、LgrammarSothiskindofnetworkattackiseffectiveforallplatformsbasedonSQLlanguagestandarddatabasesolfware，(includingMSSQLServerOracle，DB2，Sybase，MySQLere)BecausetheSQLinjectionattackprincipleisrelativelysimple，itseasytobegra

3、spedandtobecarriedout，SothatthiskindofattackisveryuniversalInthisthesisIanalysedtheSQLInjecfionARaek’sprinciple、concreteforms、generaldefensivemeasureswiththeirlimitationsatfirst；Then萄、岵doutthedetailedanalysisoftherespons

4、eprocessthattheASENETservercarriesoutfortheHTIPrequestattheNETplatform；AndexcavatedtheperformanceintheASENETsecure’saspect；ThenUSeSakindofASENET’levelURLRewritetechnolcIgyusestheHrrPmoduletocarryouttheURLRewriting”toesta

5、blishallintegrateddefensepolicyforit，ThispolicymustletdifferentWebapphcmionsystemsthatuseofdifferentMicrosofttechnologiesfeg：ASPtechnologyASPNETC拌technologyASP：NETVBtechnologyetc、tointegratbasedontheNETsystemfirstCausesu

6、seasytoestablishanunifiedandintegrateddefensemechanismfortheirSQL—InjectionAttacksdefensequestionattheASENETserver；IthasalsosetupaDetection／Defence／LocationModelforSQL／njectionAttack；Thisstrategycombinesgeneraldefensivel

7、lleasuresforSQI_InjectionARackwithASm姬T’slevelURLrewritetechnologyorganicallyTodetectthelowgradeSQLInjeefionAttacksandthecollllnonmisoperations協(xié)CalTyOntheclientside，Thepurposeisteducethenetwork’scuncntcapacityandthes既var

8、’sload；TodetectanddefendthehighgradeSQL—InjeetionAttaeks(RefersinparticulartheSQLInjectionAttacksthattheexperiencedaggressorgoesroundtheinspectiononthediemsidetocarryouOattheserverside刪tocarryOlltheintellectualizedtracki

9、ngorlocatingandputtingo／recordsThisintegrateddefensestrategyisexperimentedtobefeasibleontheplatformwithMSNET20andSQLServer2000Thisstrategy’8experimentsystem’s(10PSQLIAsystem)designandexperimentalresultanalysishavebeengiv