Research On Instrution Detection And Prevention Technology Based Web2.0

With the swift development of network communication and computer technology, web services come into Web2.0 era. The new technology of Web strengthened on interaction and real timing and many other advantages comes to being. However, new technologies and new applications also take some new security problems. A lot of Web2.0 site appears, so it is very important to analysis the security of Web2.0 site completely and comprehensively.In the basis of the definition of Web2.0, this disseration summarizes the technical characteristics of Web2.0, places emphasis on the discussion of web security issues. Then the only two existing Web2.0 worms are dissected in details with anatomise of their mechanism and technology.To improve these premature worms, we give all tech-developments of next generation Web2.0 worms.On the basis of analysing kinds of Web attacks, this paper make a further research on intrusion detection system Snort rules detect Web attacks.In the process of research,it is found that the Snort has the deficiency on detecting SQL injection and XSS(Cross-Site Scripting) attacks, and can not detect the Web2.0 worms. However, modify rules and add Payl algorithm into Snort can solve the problem above well. So, this dissertation presented the security program based on LVS (Linux Virtual Server) and modified Snort, which insure the safety for Web2.0 service.Finally, the dissertation base on the safety detection and evaluation system, LVS and Snort are realized on CentOS system. And make test to against DoS(Denial of Service) attacks, detect the new XSS attacks, SQL injection and Web2.0 worm.The simulation results show that modified Snort has greatly improved on accuracy rate rate, Web security solution can do a very good work.