http://security.ctocio.com.cn/securitycomment/232/8844232_3.shtml http://security.ctocio.com.cn/websec2009/ http://www.ibm.com/developerworks/cn/web/wa-secureweb/ http://book.51cto.com/art/201201/312498.htm http://netsecurity.51cto.com/art/201103/252558.htm