Web Services To Tolerate The Intrusion Mechanisms And Key Technology Research

Intrusion tolerance is a new technology that provides a new method and thought for the protection of the network system.It concerns the survivability of the system,although the attack is unavoidable.This paper focuses on the secret sharing in the application of protecting data, designing Web private key protection scheme.In order to select a correct result from redundant response, a reliable median voting algorithm is designed.An Web intrusion-tolerant mechanism based on research on common services intrusion tolerance model is presented. It incorporates intrusion detection, redundancy, diversity technology, and appropriately increases the modules, establishes the filter table, ensuring intrusion-tolerance characteristic of the mechanism. Without affecting the intrusion tolerance capability of system, only the proxy server and Web server with redundant design, reducing system burden and maintenance costs. Web private key protection method is based on the Shamir scheme is presented in this paper. In the parameter initialization process, the private key sharer can choose secret slice.The private key manager does not pass any information to all participants.In the Web private key recovery phase, it can verify whether the other private key sharers provide incorrect slice shadow, which can effectively protect Web private key.A reliable median voting algorithm is presented, the algorithm is based on the reliability of each server and referencing median voting algorithm.Result shows that this algorithm has many advantages than ordinary majority voting algorithm, such as more correct number of voting value, high accuracy and high reliability, meeting requirements of the mechanism.