基于安全域隔离的LAMP服务器安全保护方案  

Security protection for LAMP Web site servers based on security domain separation

作　　者：丁滟[1] 魏立峰[1] 富弘毅[1] 

机构地区：[1]国防科学技术大学计算机学院,长沙410073

出　　处：《计算机应用》2010年第A01期99-101,共3页journal of Computer Applications

基　　金：国家863计划项目(2007AA01Z408)

摘　　要：针对LAMP网站系统安全防护多集中于服务本身以及网络安全,无法提供网站服务器系统级的安全保障的问题,提出了一种基于安全域隔离的LAMP网站服务器保护方案,为相关服务设计安全域并制定访问控制规则,通过强制访问控制对服务器系统进行保护。方案设计思想简明,易于实现。分析证明,该方案可防范多种攻击手段,有效提高服务器系统的安全性。Most of present security features on LAMP Web site systems are focus on the security of services and networks, but the security of whole server system is not concerned. This paper proposed a protection scheme for LAMP Web site servers, making use of security domains separation. For related services, the approach defined specific security domains, and accordingly set their respective mandatory access control policies. Our approach is easy to implement. The analysis shows that our approach is capable to defeat diverse kinds of attacks, hence improve the security of server systems.

关 键 词：安全 LAMP网站 安全域 隔离 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]