Requirements Analysis And Architecture Design Based On Saas Mode Of The Cluster-Detection Tool For Web Security

At present, the number of global Internet users has reached to1.35billion. Individual users use the network to do shopping, bank account transfer and download software. Enterprise users rely on the Internet to build their core business. So web security has been reached to an unprecedented level. In our country, the large electronic business, financial institutions, and the third party online payment website are the main objects of network counterfeit. Hackers counterfeit those websites to lure users to log on and trade. They steal user name and password and cause user’s economic losses. In2010, national Internet emergency center received1597pieces of network fishing report, a33.1%growth compared with the year of2009. Increasing the Web security monitoring strength, improve the efficiency and power of the Web security monitoring is urgently needed. By the end of2010, China’s website number, has reached to2.878million and the total web pages are more than16billion. The world has more than40million websites and global web page number is more than222.3billion. Facing the large scale of websites safety monitoring work, the traditional single machine safety testing tools or administrator manual testing site management were almost unthinkable. It caused a lot of manpower and material resources while the effectiveness is very low. In general Increasing the Web security monitoring strength, improve the efficiency and power of the Web security monitoring is urgently needed.After the investigation of the traditional good testing tools in the market, the author draws a conclusion. Single version vulnerability testing tools are facing the single website sample examination test and have many shortcomings:To the single testing tool’s detection efficiency bottleneck and structure defects, the paper propose a plan of developing distributed cluster testing tools. Cluster testing tool design is based on the "cloud computing" technology which considered the large-scale distributed testing working mode. It can fully cover all sites of Enterprises testing scope. The testing program uses "Client quot" to realize distributed work and improve the testing efficiency and testing time.Consider the needs to do data mining, correlation analysis and statistical analysis to many testing results data, the Cluster testing tool uses Map/Reduce model to realize the storage technology, realize the distribution of data storage, make each testing node share data and testing resources, make correlation analysis and statistical analysis convenient and achieve the real distributed computation and analysis.Compared with the single testing tool, the Cluster testing tool can test fast, cover large field, and construct distributed structure and Provide SaaS service. Those characters are more suitable for large-scale web site testing work. At the same time, as the Cluster testing tool uses customizable plug-in mechanisms, it can integrate the excellent open source testing program, improve vulnerability testing ability, develop] all sorts of function plug-ins according to the need of the enterprises and better exert cluster and distributed computing function. None of the single testing tools in the market now can achieve this effect.This paper studies out to design "Web safety cluster testing system based on SaaS mode" and provides services from the angle of SaaS service providers. The system design includes the design of hardware deployment, the logical structure (ie, the whole process of software operation flow chart), and software design. Among them, the software design is the core content; from bottom to the top is testing ability layer, cluster scheduling layer, SaaS service layer. This article gives a detailed introduction and analysis to each layer from the point of demand.