论文部分内容阅读
随着web应用的日益增多,如电子商务,交流论坛,公司网站等等都使用web作为应用的平台,要构建安全的Web应用平台,Web设计人员必须在Web应用的每个层面精心设计安全性。运行Web应用的服务器也必须不断更新。但是,许多企业在设计Web应用时,Web设计人员并未全面考虑安全性。更严重的是,有的用户只为Web服务器中可从外部访问的那部分设计了安全性,而忽略了内部访问Web应用的安全性。本文从web应用安全层面出发,简单介绍了应用层防火墙如何保护网站防止被恶意注入和篡改的。
With the increasing number of web applications, such as e-commerce, communication forums, company websites and so on, all use the web as a platform for applications. To build a secure web application platform, web designers must carefully design security in every aspect of web applications . The server running the web application must also be constantly updated. However, many web designers do not fully consider security when designing Web applications. More seriously, some users only designed security for the part of the Web server that they can access externally, ignoring the internal security of accessing Web applications. This article from the web application security level, a brief introduction to the application layer firewall how to protect the site from being malicious injection and tampering.