事件驱动型防回溯BS架构设计

发布时间：2018-03-23 23:35

本文选题：防回溯　切入点：事件驱动　出处：《湖北工业大学》2017年硕士论文

【摘要】：由于CIQ窃取全球用户隐私事件与类CIQ事件时有发生,而目前互联网数据链路中的windows与linux两大操作系统、IE与chrome两大浏览器以及非本土化的、绕过防火墙的CDN网络缓存,直接加速着该事件途径的继续发展,从而质疑着开源软件的可靠性。本文首先关注媒体聚焦的若干互联网典型问题,接着从原理分析web应用程序与爬虫现状,并从现实出发,横向对比java、html5、action script 3、应用服务器与非应用服务器的安全、参考近年来国内互联网企业的主要反爬虫措施,抛开与爬虫、操作系统紧密结合的java应用服务器,采用action script3.0非加密数据混淆方式,强化用户识别、利用矩阵特性提高防火墙对该类型数据的感知能力,将32*32大型向量矩阵求逆融入web非应用服务器的应用程序部分,从数据库不存储原始内容角度力求破坏回溯数据中的连贯显示的内容,加大爬虫内容识别成本,提高特定条件下WEB非应用服务器的自身安全性,并利用矩阵混淆冗余进一步降低WEB服务器在使用计算机与网络时产生的回溯数据在互联网上的连贯传播能力。最后利用符合事件驱动模式与OOP编程规范的非应用服务器与数据库搭建web服务平台,从而构建防回溯型数据链路。对在实际中反复遇到的不可控、回溯CDN若干地址,本文进行了长达两年的第一手纪录工作,总结了服务器安全的若干实践经验和若干快速防护的措施。
[Abstract]:Because of the fact that CIQ steals global user privacy and CIQ like events, windows and linux, two major operating systems in Internet data link, Internet Explorer and chrome, and non-local CDN network cache, which bypass the firewall, are used to steal users' privacy from time to time. This paper first focuses on some typical Internet problems in media focus, and then analyzes the current situation of web applications and crawlers in principle, and starts with the reality. Comparing with javahtml5action script 3, the security of application server and non-application server, referring to the main anti-crawler measures of domestic Internet enterprises in recent years, putting aside the java application server which is closely integrated with crawler and operating system, In this paper, action script3.0 non-encrypted data confusion mode is adopted, user identification is strengthened, the perception ability of firewall to this type of data is improved by using matrix characteristic, and the 32 ~ (32) large vector matrix inversion is integrated into the application program of web non-application server. From the point of view of not storing the original content in the database, we try to destroy the coherent display content in the backtracking data, increase the cost of crawler content identification, and improve the security of the WEB non-application server under certain conditions. Furthermore, the use of matrix confusion redundancy further reduces the ability of the WEB server to transmit the backtracking data on the Internet when using the computer and network. Finally, non-applications conforming to event-driven mode and OOP programming specifications are used. Server and database build web service platform, In order to construct the anti-backtracking data link, this paper has carried on the first-hand record work for two years, for the uncontrollable and traceback CDN address that repeatedly encountered in practice. This paper summarizes some practical experiences of server security and some quick protection measures.
【学位授予单位】：湖北工业大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.09;TP309

【相似文献】