基于.NET框架的系统安全策略机制的研究与设计  

Research and Design of System Security Policy Mechanism Based on.NET Framework

作　　者：周静[1] 张青[1] 

机构地区：[1]黄冈师范学院计算机学院,湖北黄冈438000

出　　处：《科技通报》2015年第7期131-134,共4页Bulletin of Science and Technology

基　　金：湖北省高等学校战略性新兴(支柱)产业人才培养计划本科项目-软件工程专业(鄂教高(2012)13号);湖北省本科高校"专业综合改革"试点项目-软件工程专业(鄂教高(2013)10号);湖北省教育厅科研项目(B2013138);黄冈师范学院科研项目(2013020203);黄冈师范学院重点教改项目(2013CE12)

摘　　要：Web应用程序开发服务是一种完全建立在现有互联网标准之上、松散耦合的、跨语言和平台的应用程序之间通信的标准方法。对于.NET框架的体系结构,业界已经有一套现成的而且广泛接受的传输层安全机制,但现有的这些安全机制由于缺少端到端的保护、不可否认性、选择性保护、灵活的认证机制以及消息层的保护,不能在Web应用程序开发服务模型内提供足够的安全性。本文重点探讨基于.NET框架解决方案的服务器端应用系统开发平台开发Web应用系统中存在的安全隐患以及针对.NET框架系统安全隐患进行有效安全防范策略的研究。对基于.NET框架系统的应用系统开发对操作系统、开发平台和数据库之间的安全防范策略、安全机制和访问机制以及安全协作机制进行了研究和设计。Web application development service is a completely based on the existing Internet standards, loosely coupled across language and platform of communication between the application of standard methods. For the.net framework architecture, the industry has a ready-made and widely accepted set of transport layer security mechanism, but existing these due to the lack of end-to-end security mechanism to protect, non-repudiation, selective protection, flexible authentication mechanism and message level protection, not within the Web application development service model to provide enough security. this paper mainly discussed based on the .NET framework solution for server side application system development platform safety problems existing in the development of Web application system, and in view of the .NET framework system safety hazard for effective security strategy research. Based on .NET framework system of the development of operating system, application system development platform and database security strategy, security mechanism and access mechanism and security cooperation mechanism is studied and designed.

关 键 词：NET框架 系统安全 防范策略 策略机制 访问机制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TN918[自动化与计算机技术—计算机科学与技术]