The Design And Realization Of Website Data Integrity Detection Tool

With the development and popularization of Internet, the network platform hasgradually become the industry’s most convenient and efficient bridge of displayingand information communication. Government uses the network platform to transfergovernment’s voice, the school uses the network platform to promote home education,medical institutions uses the network platform to improve health care transparencyand enterprises uses network platform to promote products and so on. Anindispensable part of network platform is building website, the site is not only themedia to release information to the public but also the windows to let the public knowabout all walks of life, it is just like the human eye, through the network you cancommunicate with the soul of an enterprise directly. But the website is facing securitythreats from hackers tampering; It will bring great harm to people even countries onceit has been tampered, so to protect the site’s data integrity is especially important.Website data integrity testing tool is an important means of preserving sitesecurity, it can find whether website is being attacked in time. Currently, the mainwebsite data integrity testing tool is webpage tamper-proof tool. It was not onlyinefficient but ignored the DNS hijacking which is one of the popular means forhacker attacks used recently. DNS service was the first step to visit the website, if theDNS failed, normal access would be resolved to the wrong server address, the websitewould be affected. According to the above problems, website data integrity testingtool is designed.Website data integrity testing tool is the detection tool which integrates webpages malicious tampering detection, DNS hijacking detection and anomaly found. Inweb malicious tampering detection module, using regular expression extractingtechnology, Chinese words segmentation technology, TF-IDF weighted technology and cosine similarity algorithms to realize the similarity comparison of web contentand to test whether the web content was tampered. In DNS hijacking detectionmodule, using the DNS technology to implement the domain name resolution to theIP address, and using IP address matching to test whether the DNS is hijacked. Inabnormal findings detection module, through comparison between the keywordsextracting from the web page and abnormal vocabulary in database, realize thedetection that whether there is abnormal vocabulary. The detection tool also hasalarming function; when there is abnormal situation, it will send mail to the websitemanagers immediately, identify problems and limit risks timely.After testing, the accuracy and efficiency has been improved and the scope ofapplication has been enlarged by using site data integrity checking tool to monitorweb sites security. It has a positive role in promoting the promotion of websitesecurity.