如何防范针对12306网站的恶意抢票插件

How to prevent malicious rob ticket plug to 12306 website

1.
Beijing Jingwei Information Technology Co Ltd, Beijing 100081, China;
2.
Institute of Computing Technologies, China Academy of Railway Sciences, Beijing 100081, China;
3.
Internal School, Beijing University of Post and Telecommunication, Beijing 100876, China

摘要: 铁路12306网站在春运期间单日售票量突破500万张,12306网站已基本能够满足春运大量旅客同时购票的需求。但由于抢票插件的日渐盛行,围绕着售票公平性牵出了诸多话题。本文从验证码识别、用户行为分析、手机应用安全几个方面,阐述了如何防范抢票插件的恶意抢票行为。并结合实际给出了一些具体的解决方案。
- 验证码识别 /
- 行为分析 /
- 手机应用安全
Abstract: One-day ticket quantity at the railway 12306 website was broken through 5 millions during the Spring Festival. The 12306 website could be able to meet a large quantity of ticketing demands during the Spring Festival.Because the ticket to plug-in was becoming more prevalent, around the ticket fairness pulled many topics. This article analyzed the verification code identification, user behavior analysis, mobile phone application security, expounded how to prevent malicious rob ticket plug behavior, given some specific solutions.
- verification code identification /
- behavior analysis /
- mobile phone application security

[1]	文晓阳,高能,夏鲁宁,荆继武．高效的验证码识别技术与验证码分类思想[J]．计算机工程,2009（8）.
[2]	吕刚．带干扰的验证码识别研究[D]．杭州：浙江工业大学,2009.
[3]	许明．验证码的识别与反识别[D]．南京：南京理工大学, 2007.
[4]	董富强．网络用户行为分析研究及其应用[D]．西安：西安电子科技大学,2005.
[5]	杨斌．基于分布式方法的用户行为分析系统的设计与实现 [D]．北京：北京邮电大学,2013.
[6]	Rafael F,Christian B,Christoph K,et al.Android OS Security: Risks and Limitations[R]. AISEC Technical Reports, AISEC-TR-2012 -001. 2012.
[7]	刘建奇,王以刚．智能手机信息安全防范系统设计与研究[J]．信息安全与通信保密,2007（2）.