OnTheASPToMaintainTheSecurityOfApplications论维护ASP应用程序的安全性大学毕业论文外文文献翻译及原文

毕业设计（论文）外文文献翻译院专班姓学论维护ＡＳＰ应用程序的安全性式的1是b有2定345的为。6然或7密资8【abstract】ProperlyconfiguredsecuritysettingstoprotectyourASPapplicationswillnotbeunauthorizeduseraccessandtampering.TheASPprovidesawiderangeofapplicationofsafeguardprocedures.【keyword】asp,Security,webserverASPisaserver-sidescriptingenvironment,throughsuchanenvironment,userscancreateandrundynamic,interactiveWebserverapplications.ASP'sActiveXtechnologyisbasedontheuseofopendesignenvironment,userscancreatetheirowndefinitionsandcomponentsbyaddingthemtotheirowndynamicwebsitewithalmostunlimitedcapacitytoexpand.ASPcanalsouseADOtoaccessthedatabasequicklyandeasily,allowingthedevelopmentofapplicationsbasedontheWWWpossible.However,donottakethecorrectconfigurationoftheimportanceofsecuritysettings.Ifyoudonotcorrectlyconfigurethesecuritysettings,notonlymakeyourASPapplicationtounnecessarytampering,andwouldhamperlegitimateusersaccesstoyouraspfile.WebservertoprovideavarietyofmethodstoprotectyourASPapplicationswillnotbeunauthorizeduseraccessandtampering.First,NTFSpermissionsYoucanseparatetheapplicationofNTFSfileanddirectoryaccesspermissionstoprotectdocumentASPapplications.NTFSpermissionsWebserveristhebasisofsecurity,whichdefinesoneoragroupofuserstoaccessfilesanddirectoriesatdifferentlevels.WhenWindowsNThasavalidaccountofausertriestoaccessrestricteddocuments,thecomputerwillcheckthefileaccesscontroltable.Thetabledefinitionofthedifferentusersandusergroupshavebeengivenpermission.Iftheuseraccounthaspermissionstoopenthefile,thecomputerallowstheusertoaccessfiles.Second,TomaintainthesecurityofGlobalasaInordertofullyprotecttheASPapplication,theapplicationmustdocumenttheGlobalasatheappropriateuserorgroupsettingNTFSfilepermissions.IfGlobalasacontainsinformationtothebrowsertoreturntothecommandandyoudonothavetheprotectionofGlobalasafile,theninformationwillbereturnedtothebrowser,eveniftheapplicationofotherdocumentstobeprotected.Moreover,theapplicationmustbeontheuniformapplicationoftheNTFSfilepermissions.Third,WebserverpermissionsCanconfiguretheWebserverpermissionstorestrictuserstoviewalltherunningandoperationofthewayASPpages.UnlikeNTFSpermissionstocontroltheprovisionofapplication-specificuseraccesstofilesanddirectoriestheway,Webserverpermissionsapplytoallusers,anddonotdistinguishbetweenthetypeofuseraccount.TorunforyourASPapplicationsusers,inthesettingWebserverpermissionsmustbeguidedbythefollowingprinciples:Aspfilecontainingthevirtualdirectorytoallow"read"or"script"permissions;ofaspfileandotherscriptfilethatcontainsthevirtualdirectorytoallow"read"or"script"permissions;toincludeaspfilesandother"executive"privilegestorunthevirtualdirectoryofthedocumenttoallow"read"and"executive"authority.Fourth,ScriptmappingfileScriptmappingapplicationstoensurethattheWebserverdoesnotaccidentallydownloadthesourcecodeaspfile.Forexample,evenifyouraspfilecontainsadirectorysetupa"read"permission,aslongastheaspfileispartofascriptmappingapplications,thenyourWebserverthefilewillnotreturntothesourcecodetotheuser.Fifth,CookiesecuritySessionIDcookietotracktheuseofASPApplicationorconversationduringthevisittotheWebbrowser-specificinformation.Thismeanst