关于渗透测试的毕业论文

1、信息收集

收集网站、子站、信息，为后续渗透做好铺垫。

1.1 获取IP

1.2 Whois 查询

1.3 Mail:收集

2、扫描

3、web评估

4、漏洞修复方法：

1.WEB程序修复：

2.服务端设置建议

5、总结

6、安全建议

Title : the Information Security Detection and Prevention of University Database Abstract: With the increase of network security awareness, the single method of penetration test is unable to satisfy the need of remote penetration. The more effective way of remote penetration test uses comprehensively progressive attack techniques to intrude the internal network and get the target computer's authorization via horizontal privilege escalation so as to obtain the confidential information finally. As the preferred way of intruding an internal network, web scriting attack that mainly uses SQL injection attack has become one of the most important techniques in remote penetration test.SQL injection attack represents the common method that hackers use to attck databases. Like general access to a web page, It accesses the page via normal WWW ports in which case the firewall doesn't sound the alarm. Due to the flexibility of SQL injection, unexpected conditions often occure when using it. This article takes a PHP+MySQL website based on B/S architecture as a good example to deeply analyze the detection and prevention measures of SQL injection.Key Words: DataBase information security SQL injection solutions