软件安全-071-web应用安全v2.pptVIP

7.3.2 一个安全模型 电子商务 Web site (CMS-powered) 在线商店 两个服务器 Application server Database server 物理安全 服务器托管在主页寄存公司（hosting company）: 严格限制物理访问 在入口采用生理特征识别方法 采用自锁方法 系统用户(1) 客户 (public). 商店管理职员. 市场部. 开发者. 系统管理员. 系统用户(2) Developers System administrators Customers Store administration Marketing department ? ? ? ? Services 系统用户(3) Developers (manage application, maintain and backup database): 2 System administrators (manage servers): 2 SSH (22) SSH (22), FTP (20, 21), MYSQL (3306) Public (browse web site, buy stuff): 1 BILLION Store administration (manage store): 4 Marketing department (manage web site): 1 Apache (80) SSH FTP MYSQL APACHE Services 系统用户(4) 威胁: 由于采用明文通信协议的口令和数据危害 消除方法: 禁用plain-text协议: 在商店的采购过程 管理接口 数据库访问 检查攻击路径 Customers Apache1 DatabaseServer Apache2 Web site CMS Admin Store Admin Staff Store All paths lead to the database, which is used by all four applications! Two web servers are isolated from each other to contain intrusion. 系统用户(5) Developers (manage application, maintain and backup database): 2 System administrators (manage servers): 2 SSH (22) SSH (22), SFTP (115), MYSQL+SSL (3306) Public (browse web site, buy stuff): 1 BILLION Store administration (manage store): 4 Marketing department (manage web site): 1 Apache (80), Apache+SSL (443) SSH SFTP MYSQL APACHE Services 入口点(1) 在网络层，每个服务代表了一个入口点. 利用防火墙，进行绝对必须的访问: 外部防火墙(hosting company). 主机防火墙(iptables on Linux). 限制所有端口访问, only let port 3306 through. 入口点(2) 威胁: 可能的威胁，Apache, SFTPD, SSHD, and MySQL. 消除: 阻止必须（非基础的）访问(SFTPD, SSHD, MySQL). 可选项: buy an expensive hardware firewall. 公众现在看到的(1) Public (browse web site, buy stuff): 1 BILLION Apache (80), Apache+SSL (443) APACHE Store StoreAdmin CMSAdmin WebSite Two of four services are not needed to be accessed by the public. But the firewall cannot do any better than this. WebSite 降低(1) Public (browse web site, buy stuff): 1 BILLION Apache (80), Apache+SSL (443) APACHE Store StoreAdmin CMSAdmin Using Apache access control to allow access only to a small subset