Linux网页防篡改机制的研究与实现.pdfVIP

29 2 计 算 技 术 与 自 动 化 Vol29, No2 2 0 1 0 6 Computing Technology and Automation Jun. 2 0 1 0 : 1003- 6199(2010) 02- 0133- 04 Linux 严 承, 王伟平, 段桂华 ( , 410083) :网页防篡改对w eb 安全来说是至关重要 , 传统 防篡改技术需要对网页文件进行备份, 并 且不能实时检测和防止篡改从Linux 操作系统底层调用 角度出发, 研究基于事件触发 文件防篡改机 制, 将其应用到Apache Web 网页防篡改系统中. 该机制通过文件操作事件触发文件操作 合法性验证, 从 而监控和阻止对网页文件 非法篡改. 测试结果表明, 在无需备份网页文件 情况下, 该机制能够有效地防 止 Apache Web 网页 非法篡改, 具有良好 运行性能 :网页防篡改; Apache ; Linux ; LKM( Linux 可加载内核模块) :TP311. 52 :A Research and Implementation of Webpage Tamper- resistant Mechanism for Linux WA NG Weiping, YAN Cheng, DUAN Guihua ( School of Information Science and Engineering, Central South University , Changsha 410083, China) Abstract:Web page tamper- resist ant is critical to web securit y. The traditional anti- tamper t echnology needs to back up all the website files, and can not do real- time detect ion or stop the tampering activit y of web page. This paper proposes an event- triggered anti- tamper mechanism on Linux , and also gives the design and implementation of an Apache Web page tamper- resistant system based on the mechanism. In this mechanism, the legitimacy verification operation w ill be t riggered by the event of file operations, t hus the mechanism w ill be able to monitor and prevent illegal modification of web page files. System test results show that the mechanism can effectively prevent Apache web page files from illegal tampering almost without any performance degradation, while it does not need to do backup for any w eb pages. Key words:web page tamper- resistant; Apache; Linux ; LKM 1