【作者】 张超；

【导师】 曹玖新； 卢琪；

【作者基本信息】 东南大学 ， 软件工程， 2015， 硕士

【摘要】 计算机互联网的出现极大的改变了人们的生活方式与工作习惯,大量的共享信息给人们带来了各方面的便利,但与此同时由于互联网本身的开放性、脆弱性使得互联网面临的安全问题也日益突显。互联网上的Web站点几乎时刻都面临着拒绝服务攻击、木马注入、跨站脚本等恶意攻击,并常因此导致服务中断、网站内容被恶意篡改、客户信息泄露等严重后果,极大的削弱了Web站点的稳定性,同时也严重影响了用户对Web站点的信心。更值得关注的是,网页木马由于其制作的简捷性、传播速度快、变种形式多样、破坏力强、挂马方式的多样性等原因使其成为最为广泛的网络攻击手段并大行其道,给网络安全造成了极大威胁和负担。结合上述网络安全现状,本论文主要针对网站安全需求,完成了网络站点安全检测总体框架设计。首先,通过网络爬虫抓取网页源码并进行解析,再利用网络实时状态检测子系统对网站进行巡查,主要包括检测网站状态是否正常、网页中是否有文字或者图片被篡改、网站中是否含有死链接、错误链接等影响网络效率问题,以保证网站系统的稳定性；另一方面,针对日益猖獗的网页木马,系统依据当前主流的网页木马检测技术,建立木马病毒库和被检测网站模板,通过周期性地获取待检测网站网页信息,对网页代码进行定期检测,并完成对木马病毒的实时检测。论文在总体设计的基础上,完成了系统功能模块的实现,并对系统的功能和性能进行了测试,结果显示所实现系统满足网站安全检测需求,具有较好的可用性。更多还原

【Abstract】 With the rapid development of computer technology, internet has been greatly changing everyone’s lifestyle. Indeed, more and more people start fully enjoy getting the enormous shared information from the internet and benefit a lot in every aspect by internet. However, because of the openness of the internet itself, the problem of network security is becoming increasingly vital.All the websites are almost faced with denial of service attacks, Trojans injection, cross site scripting malicious attack etc which lead to service interruptions, site tampering, and personal information leakage all the time. As a result, it becomes a big challenge to keep websites stable and safty these days. Furthermore, the web Trojan has become the most typical attack and caused quite a lot serious security problem since it can be easily made, efficiently spread, variant forms and so on. Therefore, there is no doubt that network security has come to the most critical moment.Base on the above network security situation and the demand for the websites security, this thesis has designed and completed the website security monitoring system which contains two subsystem, the real-time web security monitoring system and the web trojan detection system. First, the web crawler crawls all the web pages and parse to DOM tree before the subsystem response. Secondly, the real-time web security monitoring system, including detecting whether the site is funcationalbe, if a web page with text or pictures are tampered with, whether the site contains dead links, broken links and other issues affecting network efficiency, keeps the websites run smoothly. Thirdly, in order to effectively dectect web trojan, the web trojan dectection system has been designed on the current mainstream web trojan detection technology by using KMP algorithm to compare the different between the page sourse code and the trojan feature library.After all the function modules in this system were completed and tested, the result shows this system can be used to detect potential network security issues due to its reliability, maintainability and expansibility.更多还原