Research on security protective framework for typical application system

doi:10.3778/j.issn.1002-8331.2010.28.026

Computer Engineering and Applications ›› 2010, Vol. 46 ›› Issue (28): 90-93.DOI: 10.3778/j.issn.1002-8331.2010.28.026

• 网络、通信、安全 • Previous Articles Next Articles

Research on security protective framework for typical application system

GONG Lei^1，2，3，ZHAO Yong³，HAN Pei-sheng^1，3，LI Yu³

1.Institute of Electronic Technology，Information Engineering University，Zhengzhou 450004，China
2.Key Lab of Information Network Security，Ministry of Public Security，Shanghai 201204，China
3.Institute of Computer Science，Beijing University of Technology，Beijing 100124，China

Received:2010-05-10 Revised:2010-08-09 Online:2010-10-01 Published:2010-10-01
Contact: GONG Lei

典型应用系统安全保护框架研究

龚雷^1，2，3，赵勇³，韩培胜^1，3，李瑜³

1.信息工程大学电子技术学院，郑州 450004
2.信息网络安全公安部重点实验室，上海 201204
3.北京工业大学计算机学院，北京 100124

通讯作者: 龚雷

Abstract

Abstract: This paper firstly introduces two classical security protective frameworks for information system，and then focuses on how to set up safe computing environment，safe area boundary and safe communication network for widely used website application system，in order to establish security protective framework for it.This paper analyzes the construction of security protective framework，discusses some of the key technologies and describes the practical deployment and work flow of the framework.Security analysis and tests demonstrate that the framework proposed in the paper is very concrete and easy to put into practice，so that it can provide effective security support for the website application system.

Key words: security protective framework, application security, trusted computing, access control, security policy

摘要： 以现有信息系统安全保护框架为指导，针对目前普遍使用的网站应用系统，从构建安全计算环境、安全区域边界以及安全通信网络的角度出发，研究如何建立典型应用系统的安全保护框架。给出了安全保护框架的体系结构，分析了其中所涉及的关键技术，描述了保护框架的实际应用部署和工作流程。相关安全性分析和测试表明，提出的保护框架具有更强的针对性，更高的可操作性，能够为典型应用系统提供可靠的安全支撑与保障。

关键词: 安全保护框架, 应用安全, 可信计算, 访问控制, 安全策略

CLC Number:

TP309

GONG Lei^1，2，3，ZHAO Yong³，HAN Pei-sheng^1，3，LI Yu³. Research on security protective framework for typical application system[J]. Computer Engineering and Applications, 2010, 46(28): 90-93.

龚雷^1，2，3，赵勇³，韩培胜^1，3，李瑜³. 典型应用系统安全保护框架研究[J]. 计算机工程与应用, 2010, 46(28): 90-93.

[1]	YU Bo, TAI Xianqing, MA Zhijie. Study on Attribute and Trust-Based RBAC Model in Cloud Computing [J]. Computer Engineering and Applications, 2020, 56(9): 84-92.
[2]	WU Bo, LIU Yi. Data Deduplication Scheme with Dynamic Ownership Management Based on RCE in Cloud Storage [J]. Computer Engineering and Applications, 2020, 56(5): 101-108.
[3]	Gulmire ARKEN, Nurmamat HELIL. CP-ABE Re-encryption Based Access Control Constraint for Sensitive Data [J]. Computer Engineering and Applications, 2020, 56(18): 69-76.
[4]	ZHENG Zupeng, WANG Zumin, PENG Yang, JI Changqing, QIN Jing. Survey of MAC Protocols for Energy Harvesting Sensor Networks [J]. Computer Engineering and Applications, 2020, 56(15): 24-29.
[5]	YIN Longxiao, WU Zhongdong. Revocation Control Scheme in CP-ABE [J]. Computer Engineering and Applications, 2020, 56(13): 100-105.
[6]	WANG Jingyu, LUAN Junqing, TAN Yuesheng. Research on Big Data Access Control Model Based on Data Sensitivity [J]. Computer Engineering and Applications, 2019, 55(23): 70-77.
[7]	HE Liwen, HOU Xiaoyu, TANG Chengcheng, ZHOU Rui, ZHANG Xingning. Rootkit Universality Detection Method for Heterogeneous BIOS Environments [J]. Computer Engineering and Applications, 2019, 55(23): 105-112.
[8]	CHEN Lu, WANG Ze. Access Control Scheme Based on ATP-ABE [J]. Computer Engineering and Applications, 2019, 55(2): 79-85.
[9]	TAN Yuesheng, LU Liming, WANG Jingyu. Ciphertext-Policy Attribute Encryption Scheme Based on Homomorphic Encryption [J]. Computer Engineering and Applications, 2019, 55(19): 115-120.
[10]	WANG Siyu, HE Jingsha, TENG Da. Access Control System Supporting Quantification and Protection of Privacy Information [J]. Computer Engineering and Applications, 2019, 55(16): 77-87.
[11]	XU Guoyu, MIAO Xuna, ZHANG Junfeng, JIANG Tao, MA Xiaofei. Review of implicit authentication for mobile devices [J]. Computer Engineering and Applications, 2018, 54(6): 19-25.
[12]	PENG Fei1, ZHANG Tao1, XU Weiguang1, ZHAO Min1, QIN Hengjia2. Security policy generation model of operating system based on ontology [J]. Computer Engineering and Applications, 2018, 54(2): 114-118.
[13]	WANG Yong1，2, SHANG Wenli2, ZHAO Jianming2, WAN Ming2, YUAN Weiwei1. Design of embedded trusted computing platform based on TPM [J]. Computer Engineering and Applications, 2018, 54(13): 105-110.
[14]	TAN Yuesheng, NING Ning, WANG Jingyu. Research of cloud data access control based on Purpose-Based Access Control and Attribute-Based Encryption [J]. Computer Engineering and Applications, 2018, 54(13): 117-122.
[15]	XIA Zhijian, PENG Guojun, HU Hongfu. Detection of access control vulnerabilities in Web applications based on privilege verification graph [J]. Computer Engineering and Applications, 2018, 54(12): 63-68.

Research on security protective framework for typical application system

典型应用系统安全保护框架研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics