拟态防御Web服务器设计与实现

发布时间：2018-05-02 22:54

本文选题：拟态防御 + Web服务器系统　；参考：《软件学报》2017年04期

【摘要】：Web服务器系统作为重要的服务承载和提供平台,面临的安全问题日益严重.已有的防御技术主要基于已知攻击方法或漏洞信息进行防御,导致难以很好地应对未知攻击的威胁,从而难以全面防护Web服务器系统的安全.首先提出了攻击链模型,对已有技术的问题和不足进行了深入的分析.在此基础上,提出了基于"动态异构冗余"结构的拟态防御模型,并描述了拟态防御模型的防御原理和特点.基于拟态防御模型构建了拟态防御Web服务器,介绍了其架构,分析了拟态原理在Web服务器上的实现.安全性和性能测试结果显示,拟态防御Web服务器能够在较小开销的前提下防御测试中的全部攻击类型.说明拟态防御Web服务器能够有效地提升系统安全性,验证了拟态防御技术的有效性和可行性.最后讨论了拟态防御技术今后的研究前景和挑战.
[Abstract]:As an important service hosting and providing platform, Web server system is facing more and more serious security problems. The existing defense technology is mainly based on known attack methods or vulnerability information, which makes it difficult to deal with the threat of unknown attacks, and therefore it is difficult to protect the security of Web server system. Firstly, the attack chain model is proposed, and the problems and shortcomings of the existing technologies are analyzed deeply. On this basis, a pseudo defense model based on dynamic heterogeneous redundancy is proposed, and the defense principle and characteristics of the pseudo defense model are described. Based on the pseudo defense model, the pseudo defense Web server is constructed, its architecture is introduced, and the implementation of the mimicry principle on the Web server is analyzed. The results of security and performance tests show that the pseudo defense Web server can defend all kinds of attacks in the test with less overhead. It shows that the pseudo defense Web server can effectively improve the security of the system, and verifies the effectiveness and feasibility of the pseudo defense technology. Finally, the future research prospect and challenge of pseudo defense technology are discussed.
【作者单位】：数学工程与先进计算国家重点实验室;复旦大学并行处理研究所;国家数字交换系统工程技术研究中心;
【基金】：国家重点研发计划(2016YFB0800104) 国家自然科学基金(61572520) 上海市科学技术委员会科研计划(14DZ 1105300)~~
【分类号】：TP393.08

【相似文献】