CAJ | 학술논문

Web服务在给基于异构平台的应用集成带来极大便利的同时,其自身各核心组件也面临着恶意攻击的威胁.详细分析了针对单个Web服务以及Web服务组合过程的各种常见攻击技术的原理、特点,探讨了相应的检测和防御措施,结合已有研究成果,讨论了Web服务攻击防护将来的研究方向以及面临的挑战.
Web복무재급기우이구평태적응용집성대래겁대편리적동시,기자신각핵심조건야면림착악의공격적위협.상세분석료침대단개Web복무이급Web복무조합과정적각충상견공격기술적원리、특점,탐토료상응적검측화방어조시,결합이유연구성과,토론료Web복무공격방호장래적연구방향이급면림적도전.
Web service greatly facilitates the application-to-application integration based on heterogeneous platform, but its core components are faced with threats of malicious attacks. This paper detailedly analyzed the principles and characteristics of various familiar attacks on single Web service and Web service composition, and pointed out the corresponding detection and prevention countermeasures. On the basis of current research achievements, also presented a discussion on the future research directions and the challenges of Web service defenses against attacks.