论文部分内容阅读
SQL注入攻击是网站系统遭遇的最频繁的攻击方式之一,可以取得数据管理权限,严重危害网站系统的正常运行。本文分析了现阶段各种防护系统所采用的SQL注入攻击检测方法的缺点,论述了通过在SQL注入攻击检测过程中增加用户行为特征分析,引入黑名单机制的检测方法,从而克服现有SQL检测机制的缺陷,提高检测效率和准确率。
SQL injection attacks are one of the most frequent attacks on a website system, and can gain data management rights and seriously endanger the normal operation of the website system. This paper analyzes the shortcomings of SQL injection attack detection methods adopted by various protection systems at this stage, and discusses the detection mechanism of adding blacklist mechanism by adding user behavior analysis during SQL injection attack detection, and overcomes the existing SQL detection Mechanism of defects, improve detection efficiency and accuracy.