Abstract: Ajax as a core technology of Web 2.0, can send request to server asynchronously and make partial page refresh, which has been an essential technology for developing Web applications. Along with this technology booming, more and more security issues also emerge. This paper analyzes several Ajax Web-based attack and defense methods, and carries out case analyses based on one of the attacks, to verify the effectiveness of the proposed defense methods.


Key words: Ajax, Web attack, defense method