Web系统中间件加固研究与实现

Research and implementation of Web middleware reinforce

Web系统的广泛应用,其本身面临各种各样的安全威胁.中间件作为操作系统与应用系统之间的管道,如果配置和管理不当会给应用系统带来很大的安全隐患.中间件的加固主要是从软件管理、权限管理和参数安全性配置方面来进行,及时修复软件的漏洞,修改操作中间件的用户权限,修改口令配置参数,启用日志审核等.中间件加固完毕后,应有一个有效的评估计算方法,对加固前和加固后进行比较,总结出加固的效果.

Web systems have been widely used,and it has a variety of threats to its security,middleware is kind of pipe between the operating system and application system,if it is not properly configured and managed,then the application systems will be in a significant security risk.Middleware reinforcement mainly from software management,rights management and security configuration parameters,fix software bugs,modify operator of middleware user permissions,modify the password configuration parameters,enable logs auditing.After middleware consolidation is completed,there should be an effective calculation method of assessment,to compare before and after the reinforcement,summed up the effection of reinforcement.