为避免Web页面被篡改或重放而导致的网站服务中止或形象损毁等严重后果,提出了一种内嵌于Web服务器的实时的防篡改及防重放机制,并给出了其实现方法。该机制可以有效防范页面被恶意篡改,还可以防范黑客重放木马脚本程序,提高了系统的安全性和可靠性。
To avoid the abortion of Web services or contamination of entity images once WebPages have been modified or replaced deliberately, an efficient anti-modification and anti-replacement mechanism was presented in this paper. The mechanism works based on the research about Apache APL With the real-time WebPages identification middleware embedded in Web server, it can prevent existed pages from being modified and refuse illegal hobbyhorse program effectively. The application shows that it can improve the security and reliability of Web server.