一种基于E-Key及Web页面监控的网站防篡改机制研究  

Website tamper-resistant mechanism based on E-Key and Web page monitor

作　　者：范建华[1] 宋云波[1] 

机构地区：[1]陕西师范大学国际商学院,陕西西安710062

出　　处：《成都信息工程学院学报》2009年第4期356-360,共5页Journal of Chengdu University of Information Technology

摘　　要：通过监控Web页面文件变化和利用E-Key数字证书提高操作安全的网站防篡改机制,可以有效减少甚至消除由于网页遭遇篡改而给企业造成负面影响的目的。特殊设计的Web页面访问过滤监控程序通过计算,比对摘要,可以及时发现被篡改页面并执行删除操作和通知Web页面文件监控程序。Web页面文件监控程序立即停止Web服务,并删除变化文件。Web页面文件监控程序定期向Web页面安全管理服务程序发送心跳包,Web页面安全管理服务程序通过对心跳包的实时监测监控文件变化情况,并及时进行修复还原和报警,同时进行文件更新管理以及文件及其摘要备份。客户端安全控件实现操作者E-Key数字证书和服务器证书间的双向认证,确保Web管理者远程操作过程的安全性。The Web page tampered illegally brings an immeasurable social and economic loss on the enterprises. The tamper-resistant mechanism which monitors the changes of the Web page document and enhances the security of the operation with E-Key certificate can be an effective way in reducing or even eliminating the negatNe effects of the en- terprises. The specially designed Web page filtration can detect the tampered Web pages in time and removes them immediately, prevent the {low of the tampered information to the internet. The document change monitoring the procedure and management service procedure monitors the document changes and carries out the repair and restore in time. The twp-way authentication between the E-Key digital certificate and the server certificate can be achieved through the terminal security control and the security of the whole management process is guaranteed.

关 键 词：E—Key数字证书 监控程序 防篡改 安全管理服务程序 心跳包 终端安全控件 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]