Webpage Server Update Verification via Process Name and ID Whitelisting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Webpage servers deployed on public networks are vulnerable to illegal changes by hackers, leading to security issues as existing technologies only verify update processes based on process names, failing to prevent tampering by sophisticated attackers.
Innovation Solution
A method and system that verify update processes by comparing both process names and IDs against a preset whitelist, ensuring only authorized processes modify webpage documents, with a policy server distributing security policies to maintain uniform security across multiple webpage servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only process name is used to verify update processes, then the verification process is simple, but the security is insufficient and hackers can tamper with webpage content
Solution Approach 1:
The verification process is segmented into multiple independent checks: first verifying the process name against a whitelist, then verifying the process ID against a corresponding whitelist. This segmentation allows each verification layer to be simple while the combination provides strong security, resolving the contradiction between simple verification and high security.
Solution Approach 2:
The system performs preliminary actions by pre-generating and storing whitelists of authorized process names and their corresponding process IDs before any update operations occur. This preliminary preparation enables rapid verification during runtime without adding complex real-time computation, thus maintaining simplicity while enhancing security.
2Reliability
If process ID verification is added to the whitelist mechanism, then security against sophisticated attackers is improved, but the complexity of the verification system increases
Solution Approach 1:
The verification system is divided into two independent but complementary modules: process name verification and process ID verification. Each module maintains its own whitelist and verification logic, making individual modules simple while their combination provides robust security against sophisticated attackers who might bypass single-layer verification.
Solution Approach 2:
The system introduces an intermediary verification mechanism that checks both the process name and process ID against pre-stored whitelists before allowing any update operation. This intermediary layer acts as a gatekeeper that validates multiple attributes simultaneously, enhancing security without requiring complex real-time analysis or computation.
3Reliability
If multiple webpage servers are deployed on public network, then service availability is improved, but vulnerability to illegal changes by hackers increases
Solution Approach 1:
Before deploying multiple webpage servers to public networks for improved availability, the system performs preliminary actions by pre-configuring security verification mechanisms including process name whitelists and process ID whitelists on each server. This preliminary security setup ensures that even though servers are exposed to public networks, they are protected against illegal changes through automated verification of update processes.
Solution Approach 2:
The system implements a feedback mechanism where each webpage server continuously monitors and verifies the credentials of any process attempting to update its content. The verification process provides immediate feedback by comparing process names and IDs against stored whitelists, automatically blocking unauthorized access attempts while allowing legitimate updates, thus maintaining service availability while reducing vulnerability to hacking.
Data Source
AI summary
The present disclosure relates to a method and system for updating a webpage and a webpage server. The method includes: upon detection of an update instruction, acquiring a feature value of an update process that generates the update instruction, the feature value comprising a process name and process identification of the update process; comparing the acquired feature value with each set of feature values in a preset process whitelist; and if there is an item in the preset process whitelist which is identical to the acquired feature value, adjusting a stored webpage document according to the update instruction.