Research And Implementation Of Web Application Security Protection System

With the rapid development of computers and the Internet, Web applications have become the most efficient and flexible information carrier. With the rapid development of Web applications, it faces a serious security situation. More and more Web applications using malicious programs spread themselves. It will greatly harm the user. So research Web application security system is of great significance and practical value.This paper is based on research of a company’s web content management systems. The purpose is to improve the system’s Web application security system and strengthen its defense capabilities. After the actual use, we found that the Web application security systems are not capable of defending against page malicious code attacks. To repair this defect, we need to add pages malicious code detection system to the Web application security protection system.This paper analyzes the current popular web malicious code detection principles and techniques, summarizes the characteristics of various Web pages malicious code, designed a simulation using the feature matching technology combined with browser detection. The main idea of the method is to use a web browser to access the simulation file and monitor the operation of the browser to determine whether web pages containing malicious code. General method can not detect encrypted confused JavaScript malicious code. This technology solves this problem. This page malicious code detection system based on B/S architecture, multiple module detects page and total control module integrated detection results, logging, and sends a warning message.After testing and actual use, this page malicious code detection system works well. It can detect most of the malicious code, including the encrypted confused JavaScript malicious code.And this page malicious code detection system has a high efficiency, reaching the goal of improving the original Web application protection system.