关于Web应用层深度防御系统的研究与实践

随着互联网技术的不断发展,攻击网站的手段也日趋多样化,尤其是SQL注入攻击、跨站脚本攻击等Web应用层攻击手段对网站安全的威胁越来越大。文章从防范应用层攻击的角度分析了配置深度防御系统的必要性,并结合应用深度防御系统的实践,提出了优化改进深度防御系统的设想。

Research and Practice on Depth Defense System for Web Application Layer

With the continuous development of Internet technology,the methods of attacking websites are becoming more and more diverse.Especially SQL injection,XSS and etc.,these Web application layer attack methods cause greater threat to websites security.From the angle of preventing the attacks on application layer,the necessity of configuring depth defense system is analyzed,and combining the practices of applying depth defense system,the idea of optimizing and improving depth defense system is presented.