摘要
大部分Web应用都存在安全漏洞从而为攻击者提供了一扇攻击的大门,并且传统安全设备如网络防火墙、入侵检测系统只能保护开放系统互连(OSI)参考模型的较低层,并不能有效防御应用层的攻击。在分析了主流的Web应用层的攻击方法后提出一个Web应用防火墙的整个实现架构和一些过滤策略。Web应用防火墙用Python实现,经测试,可以有效地阻止各种恶意的攻击,如SQL注入、跨站脚本攻击和应用层拒绝服务攻击。
Most Web applications contain security vulnerabilities and open a door to attackers.Moreover,the traditional security software,like intrusion detection system or firewall,could only protect the lower layer of OSI model,but fail to avoid Web application layer attack.Based on analysis of the mainstream hacking skills against the Web application layer,this paper presents design of the architecture and some filtering policies for an Web application firewall.The firewall is implemented with python,and the experimental results show that the firewall could block the malicious attacks,including SQL injection,XSS,application layer DDoS.
出处
《信息安全与通信保密》
2011年第5期104-106,共3页
Information Security and Communications Privacy
