With the development and upgrading of the Internet, the issue of network security has been continuously emphasized, and ultimately promoted to the strategic level of the country.China has established leading organizations and departments related to network security issues to effectively prevent and solve the problems caused by network security.Thus, network security is becoming more and more important. This paper studies Web-oriented attack methods and defense countermeasures, in order to improve the awareness of network operators and users.