基于校园Web服务安全策略的应用与研究

Application and research based on campus Web services security policy

文章在分析了校园web信息系统安全现状、Web应用安全威胁产生的原因等基础上,提出了Web信息系统的安全防护策略,重点阐述了Web应用防火墙和IPS入侵保护系统在Web信息应用系统中的应用。实际使用表明,Web应用防火墙的使用,有效地解决了Web服务器群在网络运行中的安全性问题,阻断了黑客绕过网络层的防护,对Web应用系统的恶意攻击和篡改。

Based on the analysis of the current situation on campus information security web systems and the reasons for the Web application security threats, the paper puts forward the Web information system security policy, focusing on the Web application firewall and the application of Intrusion Protection System in Web Information Application System. Actual use shows that using a Web application firewall can effectively solve the security issues in the network running. It prevents the hackers from bypassing the network layer protection and maliciously attacking and tampering the Web application system.