Research And Design Of Security Risk Control Platform Based On SOA

With the rapid development of Internet commerce,the businesses of Internet enterprises have become increasingly diversified,and the scale of their businesses has become increasingly large.Then the guarantee of business security is becoming particularly important for the enterprises.Therefore,a security risk control platform is a widely adopted approach against this situation in the industry.However,most common security risk control platforms still have many problems that need to be strengthened and improved.Particularly,the complicated and unpredictable characteristics of the businesses requires the security risk control platforms to own higher flexibility,scalability,and responsiveness.As a result,it is imperative to research and develop a set of security risk control platform meeting the needs of the enterprise.Firstly,the background significance of the research and design of the security risk control platform is analyzed,and the problems faced by the enterprise in building the risk control platform system are elaborated.The advantages and necessities of adopting the SOA framework to build the security risk control platform are pointed out.Meanwhile,the key technologies involved in system design and development are introduced,including SOA architecture and Dubbo framework and SSM.Secondly,the analysis of the system requirements is given,making clear the system functional requirements through the analysis of user role division and use cases.Besides,a security risk control platform scheme based on SOA architecture is designed,including the platform architecture based on a message bus,platform business architecture and risk control process design.The security risk control platform based on the SOA framework mainly has features such as easy expansion,low module coupling,and service-oriented architecture,and so on.The platform architecture based on message bus is designed according to the serviceoriented thoughts,and is split and extracted into multiple service centers according to the characteristics of the businesses.The core platform business architecture covers the docking of security risk control,the output of risk control capability,the support of risk control service and the data construction of risk control.The risk control process reflects the complete flow of business line to access the risk control platform,including event access,index calculation,data dictionary,policy configuration,penalty configuration and so on.Then,the entire security risk control platform is implemented based on the Dubbo framework,and the system modules are divided into three major service centers: event center,decision center,and service center.The code implementation layer is divided into five modules according to the business characteristics,including risk-config,risk-data-center,risk-data-dict,risk-report,and risk-strategy.Each module represents a service module respectively in the platform architecture.The businesses are split and abstracted into the independent services according to the actual characteristics of the businesses in the system,and these independent services in the platform can be composed and invoked to implement the module function.Finally,the test environment is established to test the function and performance of the system.The test process follows the evaluation principle of system functions and performance requirements.The test results show that the SOA-based security risk control platform basically conforms to the production requirements,and has the features of expansibility,low coupling,and high availability,and meet the needs of the company's risk control and make up for the shortcomings of the current market's security risk control platform in dealing with complex and variable businesses.