CAJ | 학술논문

随着Web应用的普及，其安全面临着前所未有的挑战。针对Windows平台中广泛使用的IIS服务器，利用ISAPI在Web应用层设计并实现安全防护系统，可对常见的Web攻击，如SQL注入、XSS攻击、Cookies攻击进行防御。实验表明，该安全防护系统可以在一定程度上保护网站的应用层安全，有效提高网站安全性。
수착Web응용적보급，기안전면림착전소미유적도전。침대Windows평태중엄범사용적IIS복무기，이용ISAPI재Web응용층설계병실현안전방호계통，가대상견적Web공격，여SQL주입、XSS공격、Cookies공격진행방어。실험표명，해안전방호계통가이재일정정도상보호망참적응용층안전，유효제고망참안전성。
With the development of Internet ,Web technology is widely deployed in nowadays information systems ,the ap-plication and popularization of Web make Web security is confronted with hitherto unknown challenge .Web security pro-tection system for the IIS server widely used in Windows platform ,employs ISAPI in the application layer to design and implement .It can defense common web attacks ,such as SQL injection ,XSS attack ,and Cookies attack .The results indi-cated that it can protect the web application layer security ,and improve site security as well .