【作者】 刘军；

【导师】 张霞；

【作者基本信息】 东北大学 ， 计算机应用技术， 2009， 硕士

【摘要】 随着现代企业的发展和国际化的趋势,企业越来越认识到Web应用的重要性。伴随着SaaS、PaaS等业务发展模式的兴起,将企业Intranet内使用的Web应用迁移到Internet环境中已成为一种发展方向。本论文从兼容性、性能、安全性三个方面分析Web应用在Internet与Intranet环境间的不同之处。同时结合东软软件股份有限公司开发的通用企业应用平台(Universal Enterprise Application Platform, UniEAP)系统架构进行实际分析实验,并对基于J2EE的企业应用系统在迁移过程中可能遇到的问题进行分析。在兼容性方面,本文主要分析了编写多浏览器兼容并支持国际化的Web页面的方法,并结合Dojo框架实现了兼容性较高的页面。在性能方面,本文以减少页面加载时间与缓存页面数据为出发点对系统进行性能优化,在设计缓存时使用Memcached与ehcache作为内存缓存并在客户端使用Google Gears作为硬盘缓存来实现客户端数据缓存。在安全性方面,从OWASP评选的十大危害入手分析了Web应用中出现安全问题,使用AppScan对UniEAP平台进行分析扫描。并针对扫描中发现的Ajax请求访问控制缺陷、服务器数据验证等四类问题进行分析及安全性实现。本文阐述了在迁移中可能遇到的问题,并从Web应用层提出对部分问题的解决方案。该解决方案虽然是以UniEAP业务平台为基础,但对于解决其它企业应用平台迁移过程中可能遇到的问题也具有一定的借鉴意义。更多还原

【Abstract】 With the development of modern enterprise and the international, more and more enterprises recognize the importance of Web applications. And With the emergence of SaaS and PaaS model of business development, enterprise Intranet Web applications moving to the Internet environment has become a direction of development.In this paper, from three aspects(compatibility,performance,safety)analysis the difference between Web applications in Internet and in Intranet.And combination with common enterprise application development platform (Universal Enterprise Application Platform, UniEAP) to carry out the actual analysis of system architecture. Analysis the problems may be encounted during the migration process. In compatibility, this paper manily analysis programming the Web page which can be showed normally in many kinds of browser and support the internationalization. UniEAP combine with Dojo framework to achieve higher compatibility page. In performance, this paper mainly focuses on reducing page load time and caching the data. From these two points to optimize system performance. This paper uses memcache and ehcache as memory cache tools on the server-side, use Google Gears as disk cache tools on the client-side. In safity, this paper mainly analysis the Web application security based on the top ten security vulnerabilities selected by OWASP. At first use AppScan to scan UniEAP platform and found four serious problems. Put forward some ways to resolve Ajax request access control and data validation on the server-side.In this paper, expounding the problems that may be encountered in the migration, and from the perspective of the Web application layer put forward some proposed solutions to solve these problems. Although these solutions are based on UniEAP business platform, for other enterprise applications, these solutions may be encountered with a certain degree of reference during migrate the platform to Internet.更多还原