一种网页防篡改的系统模型  

Model of Webpage Tamper-Proof System

作　　者：张磊[1] 王丽娜[1] 王德军[1] 

机构地区：[1]武汉大学/空天信息安全及可信计算教育部重点实验室,湖北武汉430072

出　　处：《武汉大学学报（理学版）》2009年第1期121-124,共4页Journal of Wuhan University:Natural Science Edition

基　　金：教育部科技重点项目(108087);湖北省科技攻关项目(2007AA101C44);武汉市科技攻关项目(200810321130)

摘　　要：针对Web网站中网页内容的安全性问题,提出了一种网页防篡改的系统模型,给出了该系统模型的设计和工作机制及其实现方法.采用内核驱动防篡改技术和核心内嵌技术,解决了网页被非法篡改时自动恢复和实时监控的问题,同时记录下篡改行为日志和Web日志信息.与传统网页发布相比,该系统模型在用户非法篡改网页时,能有效地对篡改行为进行阻止和及时地恢复.测试结果表明,该系统模型对篡改者具有追踪定位的能力,能防止非法篡改的页面被公众浏览.Based on the content security issues of webpage in Website,this paper gives a model of webpage tamper-proof system,and discusses the design of the model,its working mechanism and implementation.Using kernel-driven tamper-resistant technology and core-embedded technology,the model solves the problem of automatically restoring and real-time monitoring when the page is illegally tampered.At the same time the model records the information of tampering behavior＇s log and Web＇s log.Compared with the traditional webpage＇s publishing,the model can effectively prevent tampering behaviors and restore the page in time when users illegally tamper with the page.Test results show that the model of the system has the ability to track the location where webpage is tampered,and can prevent browsing of webpage illegally tampered by the public.

关 键 词：篡改 网页保护 内核驱动 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]