RASP based Web security detection method

Hang YU; Shuai WANG; Huamin JIN

doi:10.11959/j.issn.1000-0801.2020294

您当前的位置：

首页 >

文章列表页 >

RASP based Web security detection method

Topic:Information Security | 更新时间：2024-06-05

- RASP based Web security detection method
- Telecommunications Science Vol. 36, Issue 11, Pages: 113-120(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2020294
  CLC： TP393
- Published Online：2020-11，
  
  Published：20 November 2020
- 稿件说明：
移动端阅览
Hang YU, Shuai WANG, Huamin JIN. RASP based Web security detection method[J]. Telecommunications science, 2020, 36(11): 113-120.
DOI：

Hang YU, Shuai WANG, Huamin JIN. RASP based Web security detection method[J]. Telecommunications science, 2020, 36(11): 113-120. DOI： 10.11959/j.issn.1000-0801.2020294.

摘要

目前，传统的Web安全检测方法作用于程序输入输出端，不能防范经变形混淆后绕过检测进入程序内部执行的恶意代码，难以满足当前Web应用安全防护新需求。本方法基于对传统数据流监控方法风险的深入分析，结合RASP技术特性，提出了基于RASP的Web安全检测方法，在Web应用程序内部的权限判别函数参数、系统命令执行函数参数、数据库操作函数参数处埋下 RASP 探针，在代码解释器层面实时检测数据流的变化。本方法基于Java语言进行了实现，在实验室证明该方法在准确率和检测时间上优于传统的Web安全检测方法，并在最后分析提出了本方法的部署和应用场景。

Abstract

At present

the traditional Web security detection methods act on the input and output of the program

which can not prevent malicious code entering the program after being distorted and confused

and it is difficult to meet the new requirements of Web application security protection.Based on the in-depth analysis of the risk of traditional data flow monitoring methods

combined with the technical characteristics of rasp

a Web security detection method based on rasp was proposed.The rasp probe was embedded in the parameters of authority discrimination function

system command execution function and database operation function in Web application

and the change of data flow was detected in real-time at the code interpreter level.This method was implemented based on Java language.It was proved in the laboratory that this method is better than the traditional Web security detection method in accuracy and detection time.Finally

the deployment and application scenarios of this method were analyzed and proposed.

关键词

Keywords

references

Global runtime application self-protection (RASP) security market to grow at a CAGR of 49.68% during the period 2018-2022 [Z ] . 2018 .

邱若男 , 胡岸琪 , 彭国军 , 等 . 基于 RASP 技术的 Java Web框架漏洞通用检测与定位方案 [J ] . 武汉大学学报(理学版) , 2020 , 66 ( 3 ): 285 - 296 .

QIU R N , HU A Q , PENG G J , et al . General detection and location scheme of Java Web framework vulnerabilities based on RASP technology [J ] . Journal of Wuhan University (Science Edition) , 2020 , 66 ( 3 ): 285 - 296 .

BELLESSORT R , RUELLAN H , OUEDRAOGO N . Method and device for safely executing a Web application in a Web runtime environment:GB2554697 [P ] .2018-04-11.

陈威 , 陈乐然 , 徐小天 , 等 . 基于 Web 应用系统脆弱性的攻击及其防御技术 [J ] . 电信科学 , 2017 , 33 ( Z1 ): 108 - 116 .

CHEN W , CHEN L R , XU X T , et al . Attack and defense technology based on Web application system vulnerability [J ] . Telecommunications Science , 2017 , 33 ( Z1 ): 108 - 116 .

YIN Z X , LI Z F , CAO Y . A Web application runtime application self-protection scheme against script injection attacks [P ] . 2018

林锋 , 徐柳婧 , 陈晓华 , 等 . 一种基于多视角特征融合的Webshell检测方法 [J ] . 电信科学 , 2020 , 36 ( 6 ): 125 - 132 .

LIN F , XU L J , CHEN X H , et al . A Webshell detection method based on multi view feature fusion [J ] . Telecommunications Science , 2020 , 36 ( 6 ): 125 - 132 .

Views

554

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on the application of quantum-secure algorithms in 5G network

Research on new energy station network security assessment method based on improved LSTM network

Application research on network security operation automation practice based on RPA technology

Challenges and innovative solutions of space-ground integrated network security

Development trends of information and communication technology

Related Author

WANG Congli

LI Jinhui

WANG Jingran

XUE Weijia

WANG Jinhua

WANG Qianran

LIU Shan

LI Rui

Related Institution

National Engineering Research Center of Cloud and Network Infrastructure Security

China Telecom Research Institute

State Grid Shanxi Electric Power Company

State Grid Shanxi Electric Power Research Institute

Software Research Institute of China United Network Co., Ltd.

⁰