A method for building a web service security analysis model based on program slicing
A security analysis and program slicing technology, which is applied in the field of network security and software construction technology, can solve problems such as system hazards, and achieve the effects of improving security, improving use efficiency, and enhancing protection
Active Publication Date: 2011-12-14
江苏永达电力电信安装工程有限公司
View PDF0 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
When one of the nodes (i.e. Web service) has a security vulnerability, the security vulnerability will be spread through the interaction between nodes in the network, bringing greater harm to the system
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0037] The core problems that the present invention attempts to solve include: based on program slicing, obtain the abstraction of information flow from Web service implementation; in independent Web services, obtain the flow direction and leakage of key information; in web service networks, study key information Whether it is transmitted and leaked leads to the spread of vulnerabilities; and how to combine the analysis results of this model with the security measures proposed in the existing web service security norms and processes to internally and externally monitor key information and common messages in web services Protection, improve web service security.
[0038] Aiming at the above-mentioned core problems, the present invention is oriented to the coding stage of secure Web service development, obtains information flow abstraction based on program slices, builds a Web service security analysis model, and finds information leakage security loopholes in the Web service net...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention relates to software construction technology and network security, especially a method for establishing a program slicing-based Web service security analysis model. The present invention proposes a method for establishing a web service security analysis model based on program slicing, so as to protect key information and common messages in network services from inside and outside, and improve network service security. The technical solutions adopted in the present invention are: 1. ) Establish a slicer module to obtain information flow abstraction in Web service implementation code; 2) Establish a network service analysis module to discover security violations where key information is leaked to Internet users through the current service interface, including the security of independent network services Analysis and security analysis of the network service network; 3) Establish a security report module, which is used to generate a corresponding security report based on the model analysis results, combined with the existing web service security specifications and security measures proposed in the process. The present invention is mainly used to provide Web service security.
Description
technical field [0001] The invention relates to software construction technology and network security, in particular to the software architecture of the Web service security analysis model based on program slicing, and the method for establishing the program slicing-based Web service security analysis model. Background technique [0002] Web Service (Web Service) is a service based on Extensible Markup Language XML and HTTPS (full name: Hypertext Transfer Protocol over Secure Socket Layer, Hypertext Transfer Protocol with secure process communication mechanism layer), and its communication protocol is mainly based on simple object access The protocol SOAP, the service description is through the web service description language WSDL, and the unified description, discovery and integration protocol UDDI is used to discover and obtain the metadata of the service. [0003] The unique advantages of Web services in shielding the complexity of the system and exchanging information b...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L9/36
Inventor 李晓红冯志勇刘然徐超许光全
Owner 江苏永达电力电信安装工程有限公司