Web应用防火墙在高校网络安全中的应用  

Application of Web application firewall in university network security

作　　者：张恬[1] Zhang Tian(Wuxi City College of Vocational Technology,Wuxi 214153,China)

机构地区：[1]无锡城市职业技术学院,江苏无锡214153

出　　处：《无线互联科技》2022年第9期116-118,共3页Wireless Internet Technology

基　　金：江苏高校哲学社会科学研究基金项目,项目名称:信息生态视域下“新市民”信息贫困研究——以无锡市为例,项目编号:2018SJA0886。;无锡城市职业技术学院科研(专项)课题,项目编号:WXCY-2020-KY-23。

摘　　要：Web应用的形式繁多,攻击类型相对多样化,而传统的网络安全设备工作在网络层居多,与应用层的防护不匹配,文章通过对Web应用相关技术HTTP协议分析,对HTTP请求和应答过程的解析,以及基于已知攻击方式的不足,提出了基于特异性配置的Web应用防火墙配置。对自定义规则组针对不同Web应用匹配不同的规则,分析该种配置方式的优点,日常管理Web应用防火墙的有效方式,最后通过实际配置应用,验证该配置方式可以有效防御Web应用层的攻击,具备良好的安全防护能力。There are many forms of Web applications,and the types of attacks are relatively diversified.Traditional network security devices mostly work at the network layer,which does not match the protection of the application layer.This article analyzes the HTTP protocol of Web application related technologies and analyzes the HTTP request and response process.Analysis and based on the deficiencies of known attack methods,a Web application firewall configuration based on specific configuration is proposed.Match different rules for different Web applications to the custom rule group,analyze the advantages of this configuration method,the effective way of daily management of Web application firewalls,and finally verify that the configuration method can effectively defend against attacks at the Web application layer through the actual configuration of the application.Possess good security protection capabilities.

关 键 词：WEB应用防火墙 HTTP WEB应用 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] G647[自动化与计算机技术—计算机科学与技术]