The Developing And Application Of Web Safety Testing System In Simulation Training Environment

The purpose of constructing traning bases in higher technic and vocational colleges is to provide a simulation environment for students who can solve some technique problems in simulation environment in college. This kind of simulation environment will do good for students'empolyment after their guaduation. However, the present problem is that most college training bases are only copying their previous laboratory models, which can not reflect the requirements of integrity and continuity in cultivating vocational talents in college. Furthermore, this sort of training bases can not give preminence to simulation of future vocational environment.This article exemplied the constructoin of traning environment which introduced the great significance of network research and a model of network simulation training environment.Furthermore, in order to improve the function of Network Simulation Training environment, the authors designed a series of Web safety testing system based on ASP script language. The system could check the Web'S safety, including the function of SQL injection detection, analysis, injection. The article analyzed elaborately the SQL injection attacking theories, attacking processes and steps. Meanwhile, Papers introduced elaborately in terms of the construction,function and usage of the system. Moreover, the article summed up damage and countermeasures to lay the foundation of defensive model study.The system is developed in the network nimulation nraining environment and has been applied to the environment for the students detecting the Website developed by students whether or not exist SQL injection issues.