Design Of Safety Reinforcement Scheme Of Sanxiang Fengji Website

With the popularity of the Internet and the upgrading of network technology,the security problems of government websites are becoming more and more serious.Webpage tampering and confidential data leakage emerge in an endless stream,resulting in economic losses and bad social influence.San Xiang discipline network is the Discipline Inspection official website of CPC Hunan Provincial Commission,responsible for the province's anti-corruption education,corruption exposure and other important tasks.This paper firstly analyses San Xiang discipline network vulnerabilities such as SQL injection,then proposes security reinforcement program of website in the balance of costs and functions.The design includes rewriting SQL statements with more secure code,using HUAWEI's E1000 series device to build traffic traction system to filter DDOS attack traffic,using SINFOR's VPN SSL scheme to construct of remote access VPN,using open source WebGuard software to construct web page content tamper proofing system.Because the website daily access is not large,so the cost of implement a complete security program from scratch is too high.It is the best choice to use the existing products and deployment them reasonably.The advantages of this scheme are as follows:(1)No need to change the current website code,only need to modify the SQL statement slightly,the upgrading cost is small,and the human resources are saved;(2)Using the mature network security equipment in the current market to ensure the safety of the website,reduce the R & D investment and improve the feasibility of the program.(3)No need to change the existing network architecture,only need to deploy a set of traffic traction system outside the computer room,which has less impact on the existing business.The research results of this paper provide theoretical and practical support for the security reinforcement scheme of government websites in China.