CAJ | 학술논문

本文分析了SQL注入攻击的原理和攻击步骤的方法,针对ASP网站重点分析了SQL注入攻击的实现原理、实现过程,并且针对性地提出了利用参数查询有效预防SQL注入攻击的策略实现。该策略包括检查用户输入、使用类型安全的SQL参数、使用存储过程、进行数据加密以及进行安全部署等,能很好地加强ASP网站应用程序的安全性,可有效防范绝大多数针对网站本身SQL注入式攻击。
본문분석료SQL주입공격적원리화공격보취적방법,침대ASP망참중점분석료SQL주입공격적실현원리、실현과정,병차침대성지제출료이용삼수사순유효예방SQL주입공격적책략실현。해책략포괄검사용호수입、사용류형안전적SQL삼수、사용존저과정、진행수거가밀이급진행안전부서등,능흔호지가강ASP망참응용정서적안전성,가유효방범절대다수침대망참본신SQL주입식공격。
This paper describes the principle and the methods of SQL injection attacks.And the paper puts the emphasis on the implementation methods and procedures of SQL injection attacks to the ASP website.The strategies are proposed to defend SQL injection attacks effectively by using the parameter query methods,which include checking user input,using type-safe SQL parameters,using stored procedures and so on.And the data encrypting and security deployment are used as well.The methods proposed in this paper can reinforce the security of the ASP web application,and can effectively prevent the website from the most of SQL injection attacks.