基于文件所有权的网站安全策略

Strategies of Web Security Based on File Ownership

在网站中植入木马是黑客侵害网站的常见形式。由于操作系统及web程序中的漏洞在所难免,因此基于文件所有权的安全配置策略,通过规避默认配置中的不安全因素,强化文件管理方式的安全性,设置严格而合理的权限,从而实现网站最后一道可控的安全屏障。

Trojan implanted in the site is a common form of hacking against the site. Because the operating system and web application vulnerabilities are inevitable, so file-based security configuration policy ownership, through avoidance of unsafe default configuration, file management to strengthen security, set up a strict and reasonable authority, in order to achieve the site Finally, a controlled security barrier.