Web入侵防御系统的设计与实现

Design and implementation of intrusion prevention system for Web server

针对目前常见的Web服务器安全威胁设计并实现了一套Web入侵防御系统。系统通过制定安全策略来检测所有访问Web服务器的行为,可以有效地阻止常见的攻击从而保护Web服务器的安全。由于系统的策略引擎支持加载和调用Lua语言编写的策略脚本,使策略脚本的编写更加简单、灵活。

A Web intrusion prevention system against the common Web server security threats is presented.The system detects all access to the Web server by security strategies.It can handle the common attacks to the Web server and protect the server effectively.Because the strategy engine of system supports the loading and uses the strategy script by preparing Lua language the preparation of the strategy script become more simple and flexible.