Web应用安全防护系统的研究与实现

发布时间：2018-06-05 16:45

本文选题：Web应用 + 安全防护系统　；参考：《西安工业大学》2014年硕士论文

【摘要】：在计算机和互联网高速发展的今日,Web应用已经成为传递信息最快捷,表现形式最丰富的信息载体之一。随着Web应用的快速发展,其面临的安全形势也更加严峻。越来越多的恶意程序利用Web应用作为其传播载体,对用户产生了巨大的危害,所以研究Web应用安全防护系统就具有重要意义和实际价值。本文的研究基于某公司的网站内容管理系统。目的是完善该系统的Web应用安全防护系统,增强其防护能力。经过实际应用,发现该系统当前的Web应用安全防护系统对网页恶意代码攻击的防御能力不足。针对这个缺陷,需要为现有的Web应用安全防护系统增加网页恶意代码检测子系统。本文分析了目前流行的网页恶意代码攻击原理和检测技术,总结了各种网页恶意代码的特点,提出了网页恶意代码特征匹配与模拟浏览器监听相结合的检测方法。该方法的核心思想是使用模拟浏览器访问网页文件,通过监听浏览器的动作来判断是否存在网页恶意代码,解决了加密混淆的JavaScript恶意代码难以被检测的问题。此网页恶意代码检测系统基于B/S架构设计,由多个检测模块对网页文件的代码进行分类检测,之后由总控模块整合检测结果,录入日志表,并发出警告信息。通过测试和实际使用得出,本文设计和实现的网页恶意代码检测系统对网页中各种恶意代码尤其是加密混淆的JavaScript恶意代码具有很高的检出率,检测速度较快,达到了完善现有Web应用安全防护系统的研究目标。
[Abstract]:Nowadays, with the rapid development of computer and Internet, Web application has become one of the fastest and most abundant information carriers. With the rapid development of Web application, its security situation is more severe. More and more malicious programs use Web application as their communication carrier, which causes great harm to users. Therefore, it is of great significance and practical value to study the Web application security protection system. The research of this paper is based on a company's website content management system. The purpose of this system is to improve the Web application safety protection system and enhance its protective ability. Through practical application, it is found that the current Web application security protection system has insufficient ability to defend against malicious code attacks on web pages. To solve this problem, we need to add web malicious code detection subsystem to the existing Web application security protection system. This paper analyzes the principle and detection technology of popular web malicious code attack, summarizes the characteristics of various web pages malicious code, and puts forward a detection method which combines the feature matching of web malicious code with simulated browser sniffing. The core idea of this method is to use the simulated browser to access the web page files, and to detect the existence of malicious code by listening to the actions of the browser, which solves the problem that the JavaScript malicious code is difficult to detect when encryption is confused. The web malicious code detection system is designed based on the B / S architecture. The code of the web page file is classified and detected by multiple detection modules, and then the main control module integrates the detection results, records the results into the log table, and sends out warning messages. Through testing and practical use, it is concluded that the system designed and implemented in this paper has a high detection rate for all kinds of malicious code, especially the JavaScript malicious code, which is encrypted and confused, and the detection speed is relatively fast. The research goal of improving the existing Web application security protection system has been achieved.
【学位授予单位】：西安工业大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.09

【相似文献】