摘要
文章分析了SQL注入的成因,并结合一款ASP注入防火墙的源代码,分析了注入防火墙的基本原理,并结合具体的Sniffer报文分析了Cookie注入技术。该文通过一个实际案例重点研究了差异备份的挂马技术,总结出针对各种日志进行关联分析,并获得攻击线索的方法,即根据行为特征确定攻击源方法。
The cause of SQL injection had been studied in detail.In this paper, a asp injection firewall was used to study, the fundamental principle was analyzed. Through a sniffer packet,cookie injection technique had been studied. Trojan horse technology on differential backup was analyzed. The correlation analysis method was summarized. The method based on behavioral characteristics to determine the source of the attack had been studied.
出处
《信息网络安全》
2012年第5期10-14,共5页
Netinfo Security
基金
公安部应用创新计划项目[2011YYCXXJXY119]
关键词
差异备份
COOKIE
挂马
调查
differential backup
Cookie
Trojan horse
investigation
