- 资源介绍
- 更新记录
- 安装教程
若有个人部署运行问题,点击右侧客服按钮咨询站长
站长联系方式
QQ:3484724101
摘 要
计算机互联网的出现极大的改变了人们的生活方式与工作习惯,大量的共享信息给人们带来了各方面的便利,但与此同时由于互联网本身的开放性、脆弱性使得互联网面临的安全问题也日益突显。互联网上的Web站点几乎时刻都面临着拒绝服务攻击、木马注入、跨站脚本等恶意攻击,并常因此导致服务中断、网站内容被恶意篡改、客户信息泄露等严重后果,极大的削弱了Web站点的稳定性,同时也严重影响了用户对Web站点的信心。更值得关注的是,网页木马由于其制作的简捷性、传播速度快、变种形式多样、破坏力强、挂马方式的多样性等原因使其成为最为广泛的网络攻击手段并大行其道,给网络安全造成了极大威胁和负担。
结合上述网络安全现状,本论文主要针对网站安全需求,Web服务器往往得不到传统防御方式的有效保护,使其成为整个网络环境中安全最薄弱的地方。缓冲区溢出、SQL注入、基于脚本的DDos、盗链和跨站等攻击行为对Web服务器的安全和稳定造成极大的威胁,而目前缺少有效的防御和保护的方式。本课题中首先调研了当前Web服务器所面对的威胁,然后针对这些安全威胁设计了一套木马检测系统,并通过ISAPI实现了对Windows平台下的IIS服务器的保护。在这套木马检测系统中,可以通过制定策略来检测所有访问Web服务器的行为,可以有效地阻止恶意攻击从而保护Web服务器的安全。这套木马检测系统的策略引擎可以加载和调用Lua语言编写的策略脚本,使策略脚本的编写更加简单。
论文在总体设计的基础上,完成了系统功能模块的实现,并对系统的功能和性能进行了测试,结果显示所实现系统满足网站安全检测需求,具有较好的可用性。
关键词:网络爬虫,网页源码解析,网页挂马,木马特征库,ISAPI 的解析
Abstract
The emergence of the computer Internet has greatly changed people’s way of life and work habits, a large amount of information sharing has brought people convenience in all aspects, but at the same time, due to the openness of the Internet itself, Vulnerability makes the security problems facing the Internet increasingly prominent. Web sites on the Internet almost always face malicious attacks such as denial of service attacks, Trojan horse injection, cross-site scripts, and so on, which often lead to service disruption, malicious tampering with website content, and serious consequences such as customer information disclosure. Greatly weakened the stability of the Web site, but also seriously affected the user confidence in the Web site. It’s worth it. Note: because of its simplicity, high speed of transmission, variety of forms, strong destructive power and so on, the web Trojan horse has become the most widely used means of network attack. To the network security caused the great threat and the burden.
Combined with the above network security situation, this paper mainly aims at the website security demand, the Web server often can not be effectively protected by the traditional defense mode, making it become the weakest place in the whole network environment. Buffer overflow, SQL injection, DDos, chain theft based on script and cross-station attacks pose a great threat to the security and stability of Web server, but there is a lack of effective defense and protection methods. In this paper, the threats to the current Web server are investigated, and then a Trojan horse detection system is designed for these security threats, and the Win is realized through ISAPI. Dows platform under the IIS server protection. In this Trojan detection system, we can make a policy to detect all access to Web servers, and can effectively prevent malicious attacks to protect the security of Web servers. The policy engine of the Trojan detection system can load and call the policy script written in Lua language, which makes the writing of policy script easier.
On the basis of the overall design, the realization of the system function module is completed, and the function and performance of the system are tested. The results show that the system meets the requirements of website security detection and has good usability.
Keywords: Web crawler, web page source code analysis, web page hanging horse, Trojan horse feature library, Analysis of ISAPI
目 录
4.1.1 使用ISAPI Filter获取Http报文信息 11
4.1.3 在服务器上的安装配置ISAPI Filter 14
猜你喜欢
-
绿色中国馆设计说明书论文+cad图纸
2021-06-10 -
变桨距风力发电机液压系统设计 说明书(论文)+开题报告+cad图纸
2021-06-08 -
基于html医疗前端界面设计毕业论文
2021-06-08 -
基于单目视觉的生产线工件位姿识别(开题+中期+设计源码+论文)
2021-06-10 -
短波调频接收机毕业设计论文
2021-06-08 -
本科毕业论文(设计)开题报告撰写规范
2021-06-08 -
基于HTML制作的闲置交易网站设计毕业论文+开题报告+Html静态网页源码
2021-06-08 -
基于SSH的网上书店系统的设计与实现毕业论文+任务书+翻译及原文+设计源码+数据库文件
2021-06-08 -
GSM智能家居系统设计 毕业论文+附录原理图+PCB图+实物图
2021-06-08 -
35KV变电站工程初步设计论文及计算书
2021-06-10
-
护罩注射模具设计说明书(论文)+任务书+翻译及原文+cad图纸+三维图纸+查重报告
2021-06-08 -
螺旋式压榨机的结构设计毕业论文+任务书+开题+文综+翻译及原文+答辩PPT+cad图纸+三维图纸
2021-06-09 -
基于2D连续图像序列的行人骨架关节角度估计毕业论文+项目源码
2021-06-10 -
点阵式LED汉字广告屏的设计与制作毕业论文+答辩PPT+PCB文件+单片机程序+上机位程序+上机位软件安装包
2021-06-08 -
基于JSP的产品售后管理系统设计与实现毕业论文+任务书+翻译及原文+答辩PPT+源码+数据库+辅导视频
2021-06-09 -
基于C++语言的xx站下行咽喉区联锁系统仿真软件设计 毕业论文+任务书+设计源码
2021-06-10 -
校园一卡通管理信息系统的设计与实现毕业论文+项目Java源码+答辩PPT
2021-06-08 -
钢筋拉直机设计毕业论文说明书+CAD图纸
2021-06-09 -
宜宾市中小学足球调研现状进策略毕业论文
2021-06-10 -
护栏清洁机设计 说明书(论文)+任务书+开题报告+中期报告CAD图纸+实习报告+查重报告
2021-06-08
猜你在找
99源码网,程序代做,代写程序代码,代写编程,代写Java编程,代写php编程,计算机专业代做,计算机毕业设计,网站建设,网站开发,程序 » WEB网站安全检测系统设计与实现毕业论文+选题表+开题报告+源码
常见问题FAQ
- 免费下载或者VIP会员专享资源能否直接商用?
- 本站所有资源版权均属于原作者所有,这里所提供资源均只能用于参考学习用,请勿直接商用。若由于商用引起版权纠纷,一切责任均由使用者承担。更多说明请参考 VIP介绍。
- 提示下载完但解压或打开不了?
- 找不到素材资源介绍文章里的示例图片?
- 99源码网
- 2021-06-10Hi,初次和大家见面了,请多关照!