Research On Mimic Defense Technology Applied In Portal System

With the popularization of the concept of "Internet+",Internet technology has been widely applied in various industries.Web technology as an Internet implementer has developed rapidly.However,while enjoying more and more abundant web system functions,we are suffering from inevitable vulnerabilities and security problems.The security problems faced by Web servers are very serious.Foreign countries put forward the concept of mobile target defense,which reduces the time of system vulnerability exposure through dynamic changes,changes the attack surface and increases the cost of attack.Based on dynamic heterogeneous redundancy architecture,academician Wujiang Xing proposed the concept of mimic defense through dynamic transformation.This paper focuses on the key components needed to protect the portal system,and simulates them to achieve a complete simulated web portal system:(1)Aiming at the requirement of calculating web page similarity algorithm in dynamic heterogeneous redundancy architecture,this paper designs an improved simple tree matching algorithm,which converts the output web page of portal information system into DOM form.According to the importance of presentation form,the nodes of DOM tree are given different weights,that is to say,the dynamic heterogeneous redundancy architecture is implemented.It realizes fault tolerance and improves computational efficiency.(2)In this paper,a new voter model is designed to meet the needs of the portal system in the actual use scenario.Aiming at the problem of empty waiting in traditional voters,a contest voter model based on simple tree comparison is proposed.In the model,the returned data is stored in buffer queue,and the contest mechanism is set up to process the data in the queue head.The low latency of the voting results will be transmitted to users,which improves the efficiency and effectiveness of the system.(3)Referring to the voter model mentioned above,this paper designs a mimetic database platform system.A mimetic database middleware is implemented.The middleware has the fingerprint code of the SQL instructions of the portal information system.According to the response time,it can concurrently solve the problem.The database instructions of code websites create corresponding queues for decrypted instructions of each executor,and make comparative judgments on the database instruction system in the voting module.For the information returned to the website,the mimic database middleware judges whether the database system has been tampered with by comparing the similarity of the returned content,and realizes the heterogeneous of the instruction level of the database system.