Web Hosting Safety Studies

Development of virtual network server technology, is a major contribution on network technology, is even more glad tidings of the majority of Internet users. In recent years, the virtual network server technology evolved into a more convenient, economic characteristics, has now been most government agencies, organizations, colleges and universities to provide internal network services. The services played a role of information sharing, data transfer, rich culture, at the same time, for the device to the outside world is also a communication window, symbolizes the unit’s image. However, the existence of hackers and network viruses, coupled with network servers, network and code defects, such as commercial web site, leading to possibilities of virtual web servers being hacked is always present, seriously affecting commercial network security, and accessibility of the web site.In this paper, the main topic is the research of virtual server security, analyzing the virtual server facing attack strategies (such as SQL injection attacks, XPATH injection attacks, etc.) and the defense measure (mainly deployed firewall). As the current network security devices for application-level attacks play as a limited role, in this paper we design a new virtual server WEB application security solution that it at the code level detects and prevent from their attacks。That is, on one hand, to determine the location code by the use of specific API calls before and after the user enters in their relevant parameters to determine whether it contains a possible attack and make the appropriate treatment; the other hand, in the application source code or intermediate code file into the program detection code, in order to achieve protection function. We also compare this program with present solutions to verify the feasibility in an experiment. To improve the performance of virtual server security, we will combine cloud computing with WEB technology, analyzing the security of the database in the cloud environment and FTP, and build a cloud virtual server platform, compared with the normal server performance in an experiment to test the virtual cloud server more secure.