Web应用防火墙在电子商务平台的应用

发布时间：2018-08-30 08:27

【摘要】：本论文主要对Web应用防火墙在电子商务平台的应用进行了研究,通过分析目前电子商务平台Web应用在国内安全现状以及Web应用防火墙的在国内外的研究现状和发展趋势,其次分析了国内电子商务平台Web应用安全的发展现状和Web应用的典型架构,同时分析了在电子商务平台上Web应用面临的主要安全问题。然后论述了Web应用防火墙的概念以及它和传统防火墙的区别。接着深入的阐述了Web应用防火墙的工作原理和Web应用防火墙的部署方式。接下来介绍了主流的Web攻击及其防御措施,从而提出了Web应用防火墙在电子商务平台上应用的必要性和紧迫性。随着网络购物逐渐成为了人们的购物方式之一。随之而来就是Web应用安全形势日益严峻,很多网络犯罪分子通过各种网络攻击手段窃取用户在电子商务网站交易平台存储的信用卡号,网上银行账户,交易记录等各种信息,这些网络犯罪行为,严重的阻碍了电子商务的正常发展和侵害了网民的隐私。然而传统网络安全手段,例如传统的入侵检测系统,防火墙等都是基于网络层或者物理层的防护,对于目前大多数网络攻击都是通过应用层来入侵网站是不起作用的。Web应用防火墙是基于计算机网络的应用层而设计的防火墙,能够有效防止目前的各类网站攻击。在介绍了主流的Web攻击及防御措施的基础上,提出了在电子商务平台上,Web应用防火墙所具备的特点,以及它的功能和架构设计,以及电子商务平台对Web应用防火墙的要求,接着研究了它对电子商务平台的应用分析和效益分析等。对电子商务企业如何选择适合自己企业的Web应用防火墙,给出了建议,同时要保证它与现有系统整合,发挥出它的最大性能。最后通过一个模拟的电子商务平台实验,在Linux系统架设一个电子商务网站,然后在服务器上安装了Naxsi这个开源的Web应用程序防火墙模块,对该网站实施各种Web攻击,与没有使用Web应用防火墙的网站对比之下,通过流量分析最后证明了该WEB防火墙能够有效的阻止大多数Web攻击。最后通过对Naxsi模块代码的优化以及Nginx服务器配置方面的优化,让它能够更好适应电子商务平台的环境,从而保证电子商务平台免受各种Web攻击。Web应用防火墙今是今后网络安全的主流应用之一,必将会有更好的发展。本论文还有很多不足之处,例如如何更好把Naxsi和Nginx和电子商务平台整合起来,发挥的它的性能最大化,同时让Naxsi开启它的自学习模式,减少各种误报,提高拦截攻击的准确率方面,优化它的规则集,都需要很多方面的工作要做。硬件Web应用防火墙是企业的首选,但是本文由于实验环境的影响,不能对它进行详细的介绍和分析。
[Abstract]:This paper mainly studies the application of Web application firewall in E-commerce platform. By analyzing the domestic security situation of E-commerce platform Web application and the research status and development trend of Web application firewall at home and abroad. Secondly, this paper analyzes the development status of Web application security and the typical structure of Web application, and analyzes the main security problems faced by Web application on E-commerce platform. Then it discusses the concept of Web application firewall and the difference between it and traditional firewall. Then the working principle of Web application firewall and the deployment mode of Web application firewall are expounded in depth. Secondly, this paper introduces the mainstream Web attack and its defense measures, and puts forward the necessity and urgency of the application of Web application firewall on the electronic commerce platform. Along with the network shopping has gradually become one of the people's shopping methods. Following this is the increasingly serious security situation of Web applications. Many cybercriminals steal all kinds of information such as credit card numbers, online bank accounts, transaction records and other information stored by users on e-commerce website trading platforms through various network attacks. These network crimes seriously hinder the normal development of electronic commerce and encroach on the privacy of Internet users. However, traditional network security methods, such as traditional intrusion detection systems, firewalls and so on, are based on the protection of network layer or physical layer. Web application firewall is designed based on the application layer of computer network, which can effectively prevent all kinds of website attacks. Based on the introduction of the mainstream Web attack and defense measures, this paper puts forward the characteristics of the web application firewall on the electronic commerce platform, its function and architecture design, and the requirements of the electronic commerce platform for the Web application firewall. Then it studies its application analysis and benefit analysis to e-commerce platform. This paper gives some suggestions on how to choose the Web application firewall suitable for the e-business enterprise, and at the same time, it should ensure its integration with the existing system and give full play to its maximum performance. Finally, through a simulated e-commerce platform experiment, set up an electronic commerce website in the Linux system, then installed Naxsi, an open source Web application firewall module, on the server, and carried out various Web attacks on the website. Compared with the website without Web application firewall, the traffic analysis shows that the WEB firewall can effectively prevent most Web attacks. Finally, by optimizing the code of Naxsi module and optimizing the configuration of Nginx server, it can better adapt to the environment of e-commerce platform. So as to ensure the electronic commerce platform from all kinds of Web attacks. The web application firewall is one of the mainstream applications of network security in the future, and will certainly have a better development. There are many shortcomings in this paper, such as how to better integrate Naxsi and Nginx with e-commerce platform, maximize its performance, and let Naxsi open its self-learning mode to reduce all kinds of false positives. In order to improve the accuracy of interception attack and optimize its rule set, a lot of work needs to be done. Hardware Web application firewall is the first choice for enterprise, but this paper can't introduce and analyze it in detail because of the influence of experimental environment.
【学位授予单位】：东北财经大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP393.08

【相似文献】