开放式Web平台可信性:问题与对策

Trustworthiness of the Open Web Platform:Challenges and Countermeasures

对近期出现的开放式Web平台共性特征进行了分析,提出了开放式Web平台由于其系统架构,在可用性、安全性及隐私性等方面存在的问题,并通过实验证明了上述问题的存在.对于增强此类系统可信性,本文认为应重视由RESTfulWebServices远程调用所带来的时间开销,在第三方服务器暂存请求副本并增加DDoS攻击检测功能;开放式Web平台应对其与第三方应用服务器之间的通信进行加密.提出了一种基于任意测试位置的第三方应用评测算法,该算法仅使用较少的测试数据.实验表明,该算法能有效检测存在安全性及隐私性漏洞的第三方应用.

The Open Web Platform,which emerged recently,is attracting increasing attention in industry. In this paper,the common characteristics of the Open Web Platform are investigated. We show that the Open Web Platform’s availability,privacy and security can be exploited easily due to its architectural design. Thus,the trustworthiness of such platform can be undermined easily. Experiments are taken to support the preceding hypothesis. Several suggestions aiming to improve the trustworthiness of such Platform are proposed. This paper presents a new evaluating approach to test third party applications in the Open Web Platform. This approach is only based on simple testing records. Experiments show that this approach can discover the vulnerable third party applications effectively.