A Website Structure Mimicry Method for Protecting the Security of Web Applications

Abstract

The invention discloses a website structure mimicry method for protecting web application safety. According to the method, a website structure map of a background web application is dynamically transformed, the transformed website structure map is shown outwards, and a real website structure is hidden. By means of the method, an attacker cannot obtain the real structure of a website, and therefore background web application analysis of the attacker can be effectively hindered, and a web application program can be protected.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to a website structure imitation method for protecting web application security. Background technique [0002] With the birth of a series of new Internet products such as Web2.0, social network, and Weibo, Internet applications based on the Web environment are becoming more and more extensive. In the process of enterprise informatization, various applications are set up on the Web platform. The rapid development of business has also attracted the strong attention of hackers, followed by the emergence of web security threats. Hackers use the loopholes in the website operating system and the SQL injection loopholes in the web service program to gain control of the web server, and at least tamper with the webpage. The serious one is to steal important internal data, and the more serious one is to implant malicious code in the webpage, so that the website visitors are ...

AI Technical Summary

Problems solved by technology

[0002] With the birth of a series of new Internet products such as Web2.0, social network, and Weibo, Internet applications based on the Web environment are becoming more and more extensive. In the process of enterprise informatization, various applications are set up on the Web platform. The rapid development of business has also attracted the strong attention of hackers, followed by the emergence of web security threats. Hackers use the loopholes in the website operating system and the SQL injection loopholes in the web service program to gain control of the web server, and at least tamper with the webpage. The serious one is to steal important internal data, and the more serious one is to implant malicious code in the webpage, so that the website visitors are violated

At present, the common means of protecting web application security include firewall, IDS, pattern recognition, URL filtering and other technologies, but these technologies are very passive. Only when an intrusion event occurs, corresponding protection measures are taken against this intrusion. It is often difficult to defend against new attack methods

Images