Webpage Security Protection Mechanism And Application Based On XML Schema Technology

Nowadays, the application programs of Web servers in domestic and abroad arelack of mechanism to verify validity of data returned from a client. It makes a maliciousattacker easily use harmful data to steal or distort valuable data and even destroy theWeb sites. It has important realistic meaning to construct the Webpage safe mechanismto defense the attack by hackers and to security of Web data.After the verification theories of Web file data has been further discussed, based onthat XML can define file structure and verify validity of data returned from a client, thesecurity framework of Webpage based on XML schema verification technology isdesigned. The function of filtering module of Webpage and parsing module of XML andprocessing module of MAC and generator module of XML schema in the securityframework of Webpage is described. The workflow in the security framework ofWebpage also is described. Combining Http protocols and the characteristics of Webdata, aimed at the safety of input data, implementation technology and the used methodsof XML parser is described. Aimed at data integrity of Webpage, the MAC processingalgorithms flow is given. Combined with interception filter supported by IIS, realizingalgorithm of Webpage control management technology is emphatically discussed. Toreduce Web application programmer work, a XML schema file generator has beendeveloped in this thesis. Web application developers use XML schemas to specify thepossible inputs of a Web application. In the runtime, all the http inputs will be convertedto an XML document. Then, via the XML validation technique, the valuator willautomatically filter out invalid and harmful inputs. Consequently, Web applications canbe protected effectively.The results showed that Webpage security mechanism based on XML verificationtechnology can prevent SQL injection attacks, the cross-website scripting attacks etc. Asecurity protection platform has been provided for Website managers to protect Webapplication programs effectively at little cost.