ÖÐÎÄ
½»Á÷»ú
Ô°ÇøÍø½»Á÷»ú
Êý¾ÝÖÐÐÄÓëÔÆÅÌËã½»Á÷»ú
ÐÐÒµ¾«Ñ¡½»Á÷ϵÁÐ
¹¤Òµ½»Á÷»ú
Åä¼þ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
·ÓÉÆ÷
»ã¾Û·ÓÉÆ÷
ÐÐÒµ¾«Ñ¡Â·ÓÉÆ÷ϵÁÐ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
ÎÞÏß
·Å×°ÐÍÎÞÏß½ÓÈëµã
Ç½ÃæÐÍÎÞÏß½ÓÈëµã
ÖÇ·ÖÎÞÏß½ÓÈëµã
ÊÒÍâÎÞÏß½ÓÈëµã
³¡¾°»¯ÎÞÏß
ÎÞÏß¿ØÖÆÆ÷
ÐÐÒµ¾«Ñ¡ÎÞÏßϵÁÐ
ÎÞÏß¹ÜÀíÓëÓ¦ÓÃ
ÔÆ×ÀÃæ
ÔÆÖÕ¶ËϵÁÐ
ÔÆÖ÷»úϵÁÐ
ÔÆ×ÀÃæÈí¼þϵÁÐ
Åä¼þϵÁÐ
·þÎñ²úÆ·
Çå¾²
´óÊý¾ÝÇ徲ƽ̨
ÏÂÒ»´ú·À»ðǽ
Çå¾²Íø¹Ø
¼ì²â¹ÜÀíÇå¾²
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
Èí¼þ
Éí·Ý¹ÜÀí
·þÎñ²úÆ·
»ù´¡Î¬»¤·þÎñ
ÔËά¹ÜÀí·þÎñ
Çå¾²·þÎñ
±¸¼þÓëÀ©ÈÝ·þÎñ
ÅàѵÓëÈÏÖ¤·þÎñ
ÍÆ¼ö°²ÅÅÔÚÖдóÐ;ÖÓòÍø£¬Ö§³ÖϵͳɨÃè¡¢WebɨÃè¡¢Êý¾Ý¿âɨÃè¡¢Èõ¿ÚÁîɨÃèµÈ¹¦Ð§
²úÆ·ÌØÕ÷£º
ϵͳÎó²î¼ì²â
ÍøÂçÖ÷»ú£º·þÎñÆ÷¡¢¿Í»§»ú¡¢ÍøÂç´òÓ¡»ú¡¢Òƶ¯×°±¸¡¢ÐéÄ⻯װ±¸µÈ£»
²Ù×÷ϵͳ£ºMicrosoft Windows 9X/NT/2000/XP/2003¡¢Æ»¹û²Ù×÷ϵͳ¡¢¹ú²ú²Ù×÷ϵͳ¡¢Sun Solaris¡¢HP Unix¡¢IBM AIX¡¢IRIX¡¢Linux¡¢BSD¡¢HPUXµÈ£»
ÍøÂç×°±¸£ºCisco¡¢Juniper¡¢F5¡¢3Com¡¢CheckpointµÈÖ÷Á÷³§ÉÌÍøÂç×°±¸£»
Çå¾²×°±¸£ºCheckpoint¡¢ÈüÃÅÌú¿Ë¡¢Cisco¡¢Juniper¡¢Palo AltoµÈÖ÷Á÷³§É̵ÄÇå¾²×°±¸£»
Ó¦ÓÃϵͳ£ºÊý¾Ý¿â¡¢Web¡¢FTP¡¢µç×ÓÓʼþµÈ¡£
±¾²úÆ·Îó²î¿âº¸Ç¸»ºñµÄÇå¾²Îó²îºÍ¹¥»÷ÌØÕ÷£¬ÖÁÉÙÖ§³ÖCVE¡¢CVSS¡¢CNVID¡¢CNNVD¡¢CNCVE¡¢BugtraqµÈÎó²îÖÖÀ࣬Ô̺¬×Ÿ»ºñµÄÑо¿ÂÄÀúºÍÉîÖ¿µÄ֪ʶ»ýÀÛ£¬ÊÕ¼¶à¸ö±ê׼ϵÄÎó²î£¬Äܹ»Îª¿Í»§ÌáÒ»Á¬µÄ¡¢¸ßÆ·ÖʵIJúÆ·Ó¦ÓüÛÖµ¡£
WebÎó²î¼ì²â
¡ñÍøÕ¾Çå¾²Îó²îÖÜÈ«¼ì²â
ÓëÏÖÔÚÊÐÃæÉÏµÄÆäËüÍøÕ¾Çå¾²¼ì²âÀà²úÆ·¼òµ¥µØË¼Á¿ÏµÍ³Çå¾²¡¢ÍøÒ³±à³ÌÇå¾²¡¢SQL×¢Èë¡¢¿çÕ¾Îó²îµÈ·½ÃæµÄÇå¾²ÎÊÌâ²î±ð£¬±¾²úÆ·´ÓÉè¼ÆÍøÕ¾Çå¾²µÄ¸÷¸ö·½ÃæÀ´¶ÔÍøÕ¾Ç徲״̬×ö³ö×îÖÜÈ«µÄÆÀ¹À£¬°üÀ¨£ºÏµÍ³²¹¶¡¡¢Î£ÏÕ²å¼þ¡¢´úÂëÉ󼯡¢¶ñÒâÍøÕ¾¡¢ÍøÒ³Ä¾Âí¡¢ÍøÕ¾°µÁ´¡¢SQL×¢Èë¡¢¿çÕ¾×¢Èë¡¢¹ÜÀíÈë¿ÚÒÔ¼°Ãô¸ÐÐÅÏ¢µÈµÈ¡£
¡ñÍøÕ¾´úÂëÍâµØÇå¾²¼ì²é
ÏÖÔÚµÄÔ¶³ÌSQL×¢ÈëɨÃè¡¢¿çÕ¾Îó²îɨÃèµÈÊÇÕë¶ÔÍøÕ¾´úÂë¾ÙÐÐÍⲿµÄºÚºÐ²âÊÔ£¬¶øÎÒÃÇÕë¶ÔÍøÕ¾´úÂëµÄÇå¾²¼ì²éÊÇÕë¶ÔÍøÕ¾´úÂë¾ÙÐÐÖÜȫֱ½ÓµÄ¼ì²é£¬ÕÒµ½SQL×¢Èë¡¢¿çÕ¾Îó²î¡¢ÍøÂíµÈһϵÁÐÇå¾²ÎÊÌâ¡£¼´Õë¶ÔÍøÕ¾´úÂë¾ÙÐÐÍâµØµÄÇå¾²¼ì²é¡£
¡ñ»ýÀÛ¸»ºñµÄÍøÂíÌØÕ÷¿â
±¾²úÆ·½ÓÄÉÁËÑо¿ÍŶӶàÄê»ýÀ۵ĸ»ºñµÄÍøÂíÌØÕ÷¿â£¬²»µ«°üÀ¨ÍøÂí´úÂëÌØÕ÷¡¢²¢ÇÒ°üÀ¨¹ÒÂíÍøÕ¾µÄÁÐ±í£¬Ë«ÖØ¼ì²âÊֶΰü¹ÜÍøÂí¼ì²â½ÏµÍµÄ©±¨ÂʺÍÎó±¨ÂÊ£¬Í¬Ê±ÎÒÃǼá³ÖÿÖÜÖÁÉÙÒ»´ÎµÄÌØÕ÷¿âµÄÉý¼¶ÒÔ¼°0dayÎó²îµÄ24Сʱ½ôÆÈÉý¼¶°ü¹Ü¡£
¡ñ¸ßЧµÄÍøÒ³ÅÀ³æÊÖÒÕ
±¾²úÆ·µÄÍøÒ³×¥È¡Ä£¿é½ÓÄɹã¶ÈÓÅÏÈÅÀ³æÊÖÒÕ¡¢Éî¶ÈÓÅÏÈÅÀ³æÊÖÒÕÒÔ¼°ÍøÕ¾Ä¿Â¼»¹ÔÊÖÒÕ¡£¹ã¶ÈÓÅÏȵÄÅÀ³æÊÖÒÕ²»»á±¬·¢ÅÀ³æÏÝÈëµÄÎÊÌâ£¬ÍøÕ¾Ä¿Â¼»¹ÔÊÖÒÕÔòÈ¥³ýÁËÎÞ¹ØÐ§¹û£¬Ìá¸ßץȡЧÂÊ¡£
¡ñ»ùÓÚ״̬µÄSQL×¢ÈëɨÃèÊÖÒÕ
±¾²úÆ·²î±ðÓڹŰåµÄÕë¶Ô¹ýʧ·´ÏìÅжÏÊÇ·ñ±£´æ×¢ÈëÎó²îµÄ·½·¨£¬¶ø½ÓÄÉ×ÔÖ÷Á¢ÒìµÄ״̬¼ì²âÀ´Åжϡ£Ëùν״̬¼ì²â£¬¼´£ºÕë¶ÔijһÁ´½ÓÊäÈë²î±ðµÄ²ÎÊý£¬Í¨¹ý¶ÔÍøÕ¾·´ÏìµÄЧ¹ûʹÓÃÏòÁ¿½ÏÁ¿Ëã·¨¾ÙÐбȶÔÅжϣ¬´Ó¶øÈ·¶¨¸ÃÁ´½ÓÊÇ·ñΪעÈëµã£¬´ËÒªÁì²»ÒÀÀµÓÚÌØ¶¨µÄÊý¾Ý¿âÀàÐÍ¡¢ÉèÖÃÒÔ¼°CGIÓïÑÔµÄÖÖÀ࣬¹ØÓÚ×¢Èëµã¼ì²âÖÜÈ«£¬²»»á±¬·¢Â©±¨Õ÷Ïó¡£¶ø³£¼ûµÄSQL×¢ÈëɨÃè²úÆ·¾ù²»¾ß±¸´ËÏîÊÖÒÕ¡£
¡ñ»ùÓÚ״̬½ÏÁ¿µÄ×¢ÈëÑéÖ¤ÊÖÒÕ
±¾²úÆ·½ÓÄÉ״̬¼ì²âÀ´¶ÔÊý¾Ý¿âµÄÊý¾Ý¾ÙÐв½⣬ÎÞÂÛÍøÕ¾½ÓÄÉʲôCGIÓïÑÔ£¬ÎÞÂÛÍøÕ¾ÊÇ·ñ·´Ïì¹ýʧÐÅÏ¢£¬¶¼ÄܾÙÐÐÕý³£µÄ²Â½â£¬¶ø³£¼ûµÄSQL×¢ÈëɨÃè²úÆ·¾ù²»¾ß±¸´ËÏîÊÖÒÕ¡£
¡ñ»ùÓÚÄ£ºýÆ¥ÅäµÄ¹ÜÀíÈë¿Ú¼ì²âÊÖÒÕ
±¾²úÆ·¹ÜÀíÈë¿Ú¼ì²âÄ£¿é²»µ«½ÓÄÉͨÀý¹ÜÀíÈë¿Ú¼ì²âÊÖÒÕ£¬¼´£ºÊ¹Óó£ÓõĹÜÀíÈë¿Ú¿â¾ÙÐÐÖðһƥÅä¼ì²é£¬²¢ÇÒ»¹½ÓÄÉÁËÄ£ºýÆ¥ÅäµÄ·½·¨À´¼ì²â¹ÜÀíÈë¿Ú£¬ËùνµÄÄ£ºýÆ¥Åä¼´Èí¼þʹÓÃÄ£ºýÆ¥ÅäµÄ·½·¨À´¶ÔÍøÕ¾ËùÓÐÁ´½Ó¾ÙÐÐÆ¥Å䣬´Ó¶ø×î´ó¿ÉÄÜÕÒ³öËùÓйÜÀíÈë¿Ú¡£
¡ñÇ¿ÓÐÁ¦µÄÆÊÎö·½·¨
±¾²úÆ·Ö§³ÖÖ§³ÖÅÀ³æ±íµ¥×Ô¶¯ÆÊÎö¡¢JavascriptÆÊÎö¡¢JavaÓëHtmlElement×Ô¶¯½»»¥¡¢AjaxÆÊÎö¡¢FlashÆÊÎöµÈÐÂÐÍ¡¢¸»ºñ¶ø¸ßЧµÄÆÊÎö·½·¨¡£Éî¶ÈÆÊÎöwebÒ³Ãæ£¬¿ÉÒÔ׼ȷ¶ø¸ßЧµÄ·¢Ã÷webÎó²î¡£
Êý¾Ý¿âÎó²î¼ì²â
±¾²úÆ·½ÓÄÉÏȽøµÄÊý¾Ý¿â·¢Ã÷ÊÖÒÕºÍʵÀý·¢Ã÷ÊÖÒյȣ¬¿ÉÒÔÕë¶Ôµ±ÏÂÖ÷Á÷µÄÊý¾Ý¿â£¬ÈçOracle¡¢MySQL¡¢DB2¡¢PostgreSQL¡¢sybase¡¢SQL Server¡¢InformixµÈ¾ÙÐÐÎó²î¼ì²â£¬°üÀ¨¶ÔÊý¾Ý¿âϵͳµÄ¸÷ÏîÉèÖá¢Êý¾Ý¿âϵͳÈí¼þ×Ô¼ºÒÑÖªÎó²î¡¢Êý¾Ý¿âϵͳÍêÕûÐÔ¾ÙÐмì²éºÍ¶ÔÊý¾Ý¿âϵͳµÄÕûÌåÇå¾²ÐÔ×ö³öÆÀ¹À£¬²¢¸ø³öÌá¸ßÊý¾Ý¿âÇå¾²ÐÔµÄÐÞ¸´½¨Ò顣ͨ¹ýµÇ¼ɨÃè¿É¶ÔÊý¾Ý¿âµÄÿÕűíÿ¸ö×ֶξÙÐÐÇå¾²¼ì²â¡£
ÁýÕÖÃæ¹ãµÄÎó²î¿â
±¾²úÆ·°üÀ¨CNNVDÈÏÖ¤µÄϵͳÎó²î¿â20¶àÀ࣬50000¶àÌõ£»WebÎó²î¿â¹²ÁýÕÖOWASP½ç˵µÄ10´óÀàÎó²î¹æÔò¡£°üÀ¨ÐéÄ⻯װ±¸¡¢Òƶ¯×°±¸¡¢ÍøÂç×°±¸¡¢Çå¾²×°±¸µÈ¶àÖÖÀàÐ͵ĹæÔò£¬ÁýÕÖÁËÄ¿½ñÍøÂçÇéÐÎÖÐÖ÷ÒªµÄ£¬Ö÷Á÷µÄϵͳºÍÊý¾Ý¿âµÈÎó²î£¬²¢ÇÒÄܹ»Æ¾Ö¤¼´Ê±¸üУ¬È·±£Îó²îʶ±ðµÄÖÜÈ«ÐÔºÍʱЧÐÔ¡£
¿É×Ô½ç˵¹æÔò¿â
±¾²úÆ·ÖУ¬Óû§³ýÁË¿ÉÒÔʹÓÃÈí¼þĬÈÏÌṩµÄ¼ì²â¿âÍ⣬Ҳ¿ÉÒÔÌí¼Ó×Ô½ç˵µÄ¹æÔò¿âÄ£°å£¬ÅúÁ¿É¸Ñ¡ËùÐèÄ£°å£¬Í¨¹ýн¨Ä£°å²¢Ñ¡ÔñËùÐèµÄ¹æÔò£¬¿É¸ßЧ¡¢ÓÐÕë¶ÔÐԵļì²âÎó²î¡£
Ç¿ÓÐÁ¦µÄɨÃèЧÂÊ
±¾²úÆ·×ÛºÏÔËÓÃԤ̽²â¡¢½¥½øÊ½¡¢¶àÏ̵߳ÄɨÃèÊÖÒÕ£¬Äܹ»¿ìËÙ·¢Ã÷Ä¿µÄÍøÂçÖеĴæ»îÖ÷»ú£¬È»ºóƾ֤½¥½øÊ½Ì½²âЧ¹ûÑ¡ÔñÊʺϵÄɨÃèÕ½ÂÔ£¬Æô¶¯¶à¸öÏ߳̾ÙÐв¢·¢É¨Ã裬´Ó¶ø°ü¹ÜÁËɨÃèʹÃü¿ÉÒÔѸËÙÍê³É¡£
׼ȷµÄÎó²îʶ±ðÂÊ
±¾²úÆ·½ÓÄɽ¥½øÊ½É¨ÃèÆÊÎöÒªÁ죬ÈÚºÏÇ°ÑØµÄ²Ù×÷ÏµÍ³Ö¸ÎÆÊ¶±ð¡¢ÖÇÄܶ˿ڷþÎñʶ±ðµÈÊÖÒÕ£¬Äܹ»×¼È·Ê¶±ð±»É¨Ã蹤¾ßµÄÖÖÖÖÐÅÏ¢£¬Èç²Ù×÷ϵͳ¡¢ÍøÂçÃû¡¢Óû§ÐÅÏ¢¡¢·ÇͨÀý¶Ë¿ÚÉÏ¿ª·ÅµÄ·þÎñµÈ¡£
±ã½ÝµÄÎó²îÑéÖ¤¹¤¾ß¼¯
±¾²úÆ·Ìṩһ¼üʽÎó²îÑéÖ¤¹¤¾ß¼¯£¬°üÀ¨SQL×¢ÈëÎó²îÑéÖ¤¡¢ä¯ÀÀÆ÷Îó²îÑéÖ¤¼°Í¨ÓÃÎó²îÑéÖ¤µÈ¡£ÔËάְԱ¿ÉÒÔÖ±½ÓÔÚϵͳ½çÃæÖÐÑ¡ÔñÏìÓ¦µÄÐÒé²¢Ìî³ä²âÊÔ×ֶζÔÄ¿µÄ¾ÙÐÐÎó²îÑéÖ¤£¬²¢ÇÒÕë¶ÔϵͳÒÑ·¢Ã÷µÄÎó²î¿ÉÒÔʵÏÖÒ»¼üÌî³äʽ×Ô¶¯ÑéÖ¤¹¦Ð§£¬½µµÍÈ˹¤²Ù×÷ÄѶȵÄͬʱÌáÉýЧ¹ûÑéÖ¤µÄ׼ȷÐÔ¡£
¶àÑù»¯µÄЧ¹û±¨±í·ºÆð
±¾²úÆ·Äܹ»ÌìÉúÃæÏò¶à¸öÓû§½ÇÉ«µÄ¿Í»§»¯±¨±í£¬²¢ÒÔͼ¡¢±í¡¢ÎÄ×Ö˵Ã÷µÈ¶àÖÖÐÎʽ¾ÙÐÐÕ¹ÏÖ£¬Í¬Ê±Ö§³ÖÒÔPDF¡¢XML¡¢HTML¡¢EXCEL¡¢WORDµÈ¶àÖÖÃûÌõ¼³öЧ¹û±¨±í¡£