三层架构模式下信息系统的漏洞挖掘策略研究

Research on Vulnerability Mining Strategy of Information System in the Three Tier Architecture Model

高度信息化的时代,信息系统的安全性得到高度重视,对于系统的漏洞挖掘与分析成为研究热点,相关的漏洞挖掘方法也得到了很好的应用。但对于小规模、应用专的信息系统的安全性却关注较少,而该类系统的安全问题同样不能忽视。针对采用自定义服务层的三层架构模式的信息系统安全方面提出了相关的漏洞挖掘策略,并针对具体的管理信息系统对该策略进行了验证,确认了漏洞挖掘的有效性,从而增强了该类信息系统的健壮性。

In the highly information-oriented era, the security of information systems are highly valued, vulnerability mining and analysis become a hot research topic. The vulnerability mining method has a good application, and for the safety of small- scale application of information systems dedicated less attention, but the security of such systems cannot be ignored. This paper presents the relevant vulnerability mining strategy, respect for the use of custom service layer three-tier information system security policy. Through specific information management system vulnerabilities mining policy was validated by the vulnerability dealt with accordingly, enhancing the robustness of information systems.