NET网站应用程序的安全设计

本文是政务网站实际建设过程中的安全编码总结。着重介绍ASP.NET网站应用程序的安全编码设计,对SQL注入攻击、逃避用户登录验证、上传木马文件等网页漏洞提出了解决措施。

A research on government website security issues

This article is the summing-up of safety coding in the process of government website construction practice.It is important that this article advances settlement on the web page leak from SQL inject,escaping load identification,wooden horse files upload and so on.At last,I summarize that the job on government website security is long-term and hard,which needs the combination of security technique,security consciousness and security defense system,then establish a set of thorough defending strategy.