基于“写”操作的Web安全防护系统的研究  

Research on the Web security defense system based on 'write' operation

作　　者：林冬茂[1] 

机构地区：[1]湖州师范学院网络中心,浙江湖州313000

出　　处：《浙江工业大学学报》2012年第2期201-204,共4页Journal of Zhejiang University of Technology

基　　金：国家自然科学基金资助项目(60872057)

摘　　要：在当前的网络环境下,"Web体系"成为网络上最常见和实用的网络应用系统.针对"Web服务系统"的攻击也层出不穷,传统的网络安全系统(防火墙+入侵防御系统)难以应对.文章从网络安全的角度,分析了现有"Web系统"的安全问题,以及现有"Web系统"在应对网络攻击行为时的不足.针对"Web系统"受攻击时会在服务器上进行"写"操作的特点,在网络上对Web服务器上的"写"行为的数据流进行安全监测和管理,来保证Web应用系统的安全.探讨了一种新的网络安全防护的思路.Under current network environment,＇Web Hierarchy＇ has become the most popular and practical network application system on the Internet.However,the cyber attacks against ＇Web Service Hierarchy＇ are more and more.The traditional network security systems（Firewall＋Invasion defensive system） are difficult to resist them.This paper analyzed the problems in existing security systems and defects facing the cyber attacks in the view of network security.Aiming at the characteristic that the ＇write＇ operation will be happened when the ＇Web Hierarchy＇ is attacked,the dataflow of ＇write＇ operation will be monitored and managed in order to guarantee the security of Web application systems.It explored a new idea of network security protection.

关 键 词：WEB 网络安全 “写”行为 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]