Research And Implementation On A New Security Homepage-Defending Technology

With the development of Internet, more and more mal-attacks towards Web homepage come up. Governments and companies have suffered great problems such as homepage tampering and important data stealing. However, current widely used homepage-defending technologies are inefficient against mal-attacks. The research on anti-tamper has become a challenge in the field of information security.Firstly, this dissertation introduced the menace the homepage facing, analyzed the weakness of traditional web server system, pointed out the deficiency of current homepage-defending technologies, and then proposed that we can protect homepage safely by enhancing the access control to homepage and by assuring the requests. After that, the dissertation compared the current prevalent access control policies, and concluded that traditional policies are not efficient in keeping homepage security.Based on viewpoints above, aiming at the security of information publishing homepage, a new Web page access control policy based on user's intention (briefly IBPAC) was proposed. It put forward the formal model and its security properties, analyzed the risk of the policy, and demonstrated that IBPAC is efficient against tampering towards homepage. Further more, based on IPBAC, the dissertation constructed a new security homepage-defending system, introduced the basic conceptions, security model and architecture of the system, illustrated the functions and design of modules in each sub-system in detail, and discussed key technologies in the implementation.Finally, the dissertation simulated and test the system simply. We carried out some tests, such as the impact of IBPAC to the Server and the capability in protecting homepage. The result showed that the new security homepage defending system is has low impact on the Server and is a reliable method in homepage protection.