秘钥交换环境下Web安全漏洞智能检测研究  

Research on Web security vulnerabilities intelligent detection in secret key exchange environment

作　　者：刘瑞军[1] LIU Ruijun(Experiment Center,Wuyi University,Wuyishan 354300,China)

机构地区：[1]武夷学院实验中心,福建武夷山354300

出　　处：《现代电子技术》2017年第9期89-92,共4页Modern Electronics Technique

基　　金：福建省教育厅科技项目(JK2012056);福建省科技厅科技项目(JK2016041)

摘　　要：为提高Web软件和网站的安全性,保护用户数据不受损伤,提出秘钥交换环境下Web安全漏洞智能检测方法。通过研究秘钥交换环境下Web安全漏洞的产生机理,设计安全性能更高的秘钥交换安全协议,在此基础上,从SVN服务器中解析出Web软件或网站的源代码,选定用于检测Web安全漏洞的功能插件并进行驱动,使用规则表达式规范功能插件的检测规则,从而检测出秘钥交换环境下的Web安全漏洞。实验结果表明,该方法在秘钥交换环境下的检测可靠性高、灵活性强。In order to improve the security of Web software and Web site,and protect the user data free from the damage,a Web security vulnerabilities intelligent detection method in the secret key exchange environment is put forward.The production mechanism of the Web security vulnerabilities in the secret key exchange environment is studied to design the secret key exchange security protocol with higher safety performance.On this basis,the source code of Web software or Web site is parsed in SVN server.The function plugin to detect the Web security vulnerabilities is selected and driven.The regulation expression is used to regulate the detection rule of the function plugin to detect the Web security vulnerabilities in the secret key exchange environment.The experimental results show that the method has high detection reliability and strong flexibility in the secret key exchange environment.

关 键 词：秘钥交换环境 Web安全漏洞检测 SVN 规则表达式 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP393.08[电子电信—信息与通信工程]