June 2021
Beginner to intermediate
355 pages
5h 5m
Chinese
Content preview from Web应用程序安全
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
21
第
1
章
软件安全历程
在研究具体的安全攻防技术之前，重要的一点是，至少要对软件安全悠久而
有趣的历史有所了解。简要概述过去一百年来的主要安全事件，应该足以使
你了解当今
Web
应用系统所依赖的基础技术。此外，它将展示安全机制的发展，
与关注前沿技术的黑客在持续寻求机会以入侵或绕过这些机制间的关系。
1.1
黑客的起源
在过去的
20
年中，黑客比以往任何时候都获得了更多的知名度和关注。因此，
没有相关背景知识的普通人通常认为黑客的概念是与互联网紧密相关的，并
且大多数黑客都只是在过去
20
年里才出现的。
但这只是部分事实。虽然全世界范围内黑客的数量确实随着
WWW
（
World
Wide Web
，万维网）的兴起而呈爆炸式增长，但自
20
世纪中叶以来，黑客就
已经出现了—甚至有可能更早，这取决于你如何定义“黑客”。许多专家在
争论这个标志着现代黑客真正起源的十年，因为
20
世纪初期的一些重大事件
与你在当今看到的黑客行为非常相似。
例如，在
20
世纪
10
年代和
20
年代，有一些特定的孤立事件可能被视为黑客
行为，其中大多数涉及干预摩尔斯电码发送者和接收者，或者干扰无线电波
的传输。然而，尽管确实发生了这些事件，但它们并不常见，并且很难准确
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.