Design And Implementation Of Startups Platform Security Scheme

As the increasing maturity and development of the Internet, it has brought pro-found changes to the society. However, due to the openness of the Internet, people can get almost all kinds of information through the network.It also includes many outlaws. They make the Internet face potential malicious attacks. Network security problem is more and more important. Since 80’s of last century, the world is filled with a large number of network crime and intrusion events.User’s information security is lack of effective protection. Every year, the losses of global economic are up to billions of dollars due to network attack.Web-based application system, due to the openness and sharing of resources, its security of system has also been an urgent problem. Identity authentication, access control and privilege management is an indispensable part of Web application system. Internet provides people with a wealth of information services and a variety of ser-vices.At the same time, network security issues have threatened the user. There are various resources in Web application system, including information, files etc. In prin-ciple, users can get the resources as long as they know the URL of the resource.The illegal user can usually get access to the resource in the Web application system whose access control is not precise enough.It introduces the needs and technology of a Web application security.It systemat-ically analyzes the aspects of URL security, authentication and access control.And it puts forward the corresponding solutions to these three security threats.According to Web application system and the security requirements of Startups platform project, it analyzes the security of the system. In the Java EE platform, it us-es Spring Security, Spring MVC, Mybatis and ExtJS technology to improve the per-formance and security of the Startups platform.The thesis designs and implements security solutions for Startups platform, including Spring Security custom filter, secu-rity communication and RBAC authority management of the background manage-ment system.