CAJ | 학술논문

网站篡改是最常见的网站攻击手段之一,一旦发生会严重影响网站运营.针对传统的网站防篡改检测技术的不足,本方案采用了基于云平台的设计方案,并从系统框架、关键技术等方面进行了阐述.通过实验验证,本方案提高了检测识别精准度和速度.同时由于借助了云架构,特别适用于大规模网站群的检测.本文设计的平台既可以为各公司、企业和政府部门的门户网站提供篡改检测服务,也可以为行业主管部门和信息安全监管部门实现管辖区域内各单位门户网站的24小时不间断监控,具有很好的社会效益.
망참찬개시최상견적망참공격수단지일,일단발생회엄중영향망참운영.침대전통적망참방찬개검측기술적불족,본방안채용료기우운평태적설계방안,병종계통광가、관건기술등방면진행료천술.통과실험험증,본방안제고료검측식별정준도화속도.동시유우차조료운가구,특별괄용우대규모망참군적검측.본문설계적평태기가이위각공사、기업화정부부문적문호망참제공찬개검측복무,야가이위행업주관부문화신식안전감관부문실현관할구역내각단위문호망참적24소시불간단감공,구유흔호적사회효익.
Defacement is one of the most common attacks to website. Once web page has been tampered with, it will seriously affect the normal operation of the website and do harm to the image of the organization. In terms of insufficient tamper-detection technology for common web, the paper designs a solution of highly accurate detection, and with the aid of cloud computing infrastructure, which is especially applicable for large-scale websites tamper detection to provide the tamper detection service to the companies, enterprises and government departments, as well. It also provides continuous 24-hour monitoring service to information security industry authorities and regulatory authorities. In doing so, it maintains the image of the organization and ensures the information security.