基于文件过滤驱动和事件触发的网页防篡改机制  

Web Page Tamper-resistant Mechanism Based on File-filtering Driver and Event-triggering

作　　者：范建华[1] 宋云波[1] 

机构地区：[1]陕西师范大学国际商学院,西安710062

出　　处：《重庆工学院学报（自然科学版）》2009年第12期65-70,共6页Journal of Chongqing Institute of Technology

摘　　要：基于文件过滤驱动和事件触发的网页防篡改机制,采用单项散列算法生成文件属性,通过篡改监测核心程序,基于事件触发方式自动监测网页文件属性,若监测到属性变动,立即执行删除操作,同时将备份文件拷贝到监测文件夹相应文件位置.部署在备份服务器上的终端安全控件结USB-Key数字证书与服务器证书于一体,通过篡改监测核心程序与安全管理服务程序协同工作,可以高效,安全地实现对Web服务器、备份服务器的更新和备份管理.安全管理服务程序通过监测篡改监测核心程序定期发来的心跳包对Web服务器进行实时监控和异常进行报警.Web page tamper-resistant mechanism based on file-filtering driver and event-triggering monitors file attribute automatically with file attribute generated by using a single hash algorithm, and through the core of tampering with monitoring procedure, which is based on event-triggered approach. If file attribute changes, it deletes the file immediately, and copies the backup files to the monitoring file folder location simultaneously. At the same time, terminal security control, which is deployed in the backup server, integrates USB-Key digital certificate and server certificate into one, through the core of tampering with monitoring procedure and security management service procedure working together, and manages updates and backup of web server and backup server efficiently and safely. Security management service procedure monitors heartbeat packet sent by the core of tampering with monitoring procedure regularly, and carries out real-time monitoring and alarming.

关 键 词：篡改监测核心程序 安全管理服务程序 终端安全控件 USB-Key数字证书 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]