A Resolvment of the Web Security Based on B/S Structure

GAN Zhi-hua,JI Chao

DOI: https://doi.org/10.15991/j.cnki.411100.2005.04.023

2005-01-01

Abstract:Aboutthe security based on B/S structure,this paper puts forward a Resolvment at filtration of sensitive information.Actual test indicates that the scheme is effective and feasible.

What problem does this paper attempt to address?

Research on security extensions based on Java 2 security architecture

TIAN Yu-hong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.24.029

2006-01-01

Abstract:The Java virtual machine(JVM)is used more frequently as the basic engine behind dynamic web services.With the proliferation of network attacks on these network resources,much work are done to provide security for the network environment.Little effort has been placed on securing a Java web server where the attacker has a valid login to the host machine.After describing the vulnerabilities in Java's security mechanisms,an extended security system based on Java 2 security architecture is introduced.It also explains the runtime status of system.The increased assurance of correct system operation and the integrity of Java application server are provided.
Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
Construction of security architecture of web services based EAI

Di Wu,Yabo Dong,Jian Lin,Miaoliang Zhu

DOI: https://doi.org/10.1007/11563952_52

2005-01-01

Abstract:The fast development of E-Commerce and information technology brings much higher requirements for enterprise informationization. Because of the differences in platforms, development languages and standards etc, enterprise application integration (EAI) has become the important form of enterprise informationization to support complex business processes. Web services have emerged as the next generation of integration technology which provides the power to support interoperability. However EAI doesn’t just present new interoperability challenges; it also presents serious privacy and security challenges. This paper presents security architecture of Web Services based EAI which uses distributed Single Sign On authentication and distributed Role-based Access Control authorization. The basic concept and prototype system of the security architecture are described in detail.
The balance between security and performance in electronic business

邓锦红,陈德人,苏斐琦

DOI: https://doi.org/10.3785/j.issn.1008-973X.2003.02.005

2003-01-01

Abstract:Security is an important element in the design of e-business sites. However, performance is the price to be paid for it. To learn how the mechanisms and protocols used to support security may impact system performance, an analysis of the security mechanisms such as TLS and SET protocol is provided. After identifying the dominant factor, i.e. bottleneck, Some auxiliary methods can be used to improve the performance of it. Dynamic load balancing, proxy servers and caches can be used for security at the network level; a combination of firewall and the single Sign-on technology can also be used at this level. For security at the server level, the use of cryptographic accelerator cards, more and faster processors, and the use of faster cryptographic algorithms can substantially reduce the time spent in the most expensive cryptographic operations so that performance is increased. In addition, an improved model based on Distributed Calculating environment and DES Cipher algorithm can effectively reduce the impact of security mechanisms on system performance.
Convenient Conversion from C/S Structure to B/S Structure based on IntraWeb Technology

Ying-jian HU,Wen-jun YAN

DOI: https://doi.org/10.3969/j.issn.1002-6886.2006.05.003

2006-01-01

Abstract:This paper summarizes the characteristics of the IntraWeb technology.According to developed Delphi C/S structure system,the method converting it conveniently to B/S structure is introduced.
Technique of Access Control Based on B/S System

Wei Wei,Zhang Qing,Liang Wenzheng

DOI: https://doi.org/10.3969/j.issn.1006-1576.2011.02.015

2011-01-01

Abstract:Through analyzing the compulsion access in HTTP request and information juggle and forgery,design data access control model and task purview model,and realize access filtering of task data and URL verifying request.The technology can solve the access control problem in B/S system and realize multi-dimension data logic in encrypt system.
WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Cheng Zhan,Xie Li

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.10.007

2008-01-01

Abstract:Web Service security problem is one of the highlighted topics in information security area recently.This article presents two security mechanisms for Web Services,transport-level security and message-level security.Then the security technology used to implement message-level security is introduces in detail.Finally,it gives a conclusion to Web Service security and proposes a new Web Service layered security model.
Development of A Web System for Water Quality Monitoring Information Management

Wei Guanxiong,Hou Dibo,Huang Pingjie,Zhang Guangxin

DOI: https://doi.org/10.4028/www.scientific.net/amm.316-317.678

2013-01-01

Applied Mechanics and Materials

Abstract:Water quality security is the guarantee of social development, the effective management of water quality information is the key to protect the water from pollution. This article focuses on the system architecture design and technology of Web-based water quality monitoring and information management system. Real-time communication between the Flex-written pages and the SQL Server database is achieved through the application of FluorineFx. The system realizes the visualized management of water quality information by visual components such as data table and data curve and so on.
A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Yuan Shuhong,Zhu Miaoliang,Yun Xia,Wu Di

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.01.048

2008-01-01

Abstract:Traditional Enterprise Application Integration(EAI) solutions lacking the support of the united standard have difficulties in resolving the main security problems such as authentication and authorization.To solve these problems,a brand new application integration security architecture based on Web Services WSSA-EAI is proposed.Web Services are applied to create general access interface,and SSO(Single Sign On) authentication and RBAC(Role-based Access Control)authorization are combined.A united EAI security architecture which is easy for maintenance is presented..
Business Activity-Oriented Security Model of Information Systems

YU Zhi-wei,TANG Ren-zhong

DOI: https://doi.org/10.3785/j.issn.1008-973x.2007.11.026

2007-01-01

Abstract:In order to overcome the shortcomings of the existing information system models,an information system security model was proposed to protect business activities and describe information systems from security view.Through analyzing the characteristic and security of information systems,this work presented the fundamental elements and their operation relationships,and the need,permit,can security constraints between the elements.The security relationships of the fundamental elements were described with formal method.The security model substantially reflects the security relationship between the assets of information systems,explicitly posts the essence that the information system supports the business operation,and clarities the relationship between business activities and the assets of information systems.Finally a case of security model of a manufacturing enterprise information system was given.
A System Framework of Security Management in Enterprise Systems

Feng Wang,Baoshan Ge,Li Zhang,Yong Chen,Yang Xin,Xiayuan Li

DOI: https://doi.org/10.1002/sres.2184

2013-04-04

Systems Research and Behavioral Science

Abstract:After analysing the security conditions in current Enterprise Systems (ES), this paper proposes a systematic framework that is based on the Secure Sockets Layer Virtual Private Network (SSL‐VPN) for improving security management. This framework takes account of several key aspects such as channel strategy, network pattern, workstation authentication, identity authentication, security workflow, etc. The proposed framework has the following advantages: low cost, high performance, easy to implement, and strong security control pattern. In addition, this paper proposes a dynamic security strategy that is about authorizing user ID and roles dynamically and conducting real‐time mapping via agent or proxy technologies. Copyright © 2013 John Wiley & Sons, Ltd.

management,social sciences, interdisciplinary
A Business Process-based Method on Security Requirement Analysis of Information Systems

Yu Zhiwei,Tang Rengzhong,Jia Dongjiao,Ye Fanbo

DOI: https://doi.org/10.3321/j.issn:1004-132X.2007.04.021

2007-01-01

Abstract:To identify the security requirements of information systems, a business process-based security requirement analysis method was presented. Focused on the business process security, the related assets which affect the business process security were identified by security tree model. The security requirements of assets were identified by risk packet and risk transferring model, and then the security requirements list was formed after coverage analysis. Finally, a case was studied to illustrate the proposed method.
Architecture of Multi-Dimension Web Application Security Based on OWASP and WASC

WU Zhen,CUI Jian,ZHOU Chang-ling,ZHANG Bei

DOI: https://doi.org/10.3969/j.issn.1001-7445.2011.z1.030

2011-01-01

Abstract:By means of researching and analyzing the reports of multiple security organizations,consortiums and corporations,we discover that web application security is becoming more vital in campus network.Based on the OWASP and the WASC,we designed a multidimension web application security architecture,and used the firewall,web application firewall,intrusion detection system,intrusion prevention system,vulnerability scan system,bastion host and auditing system to implement the architecture.We chose 50 representative web applications from Peking University campus network to study and analyze the logs from these web applications and security devices,and the results prove the validity of the multidimension web application security architecture.
Implementation of Water Treatment Process Design Based on the B/S Structure

CHENG Hui-wen,XU Li

DOI: https://doi.org/10.3969/j.issn.1001-4551.2007.10.029

2007-01-01

Abstract:A program of the water treatment process design was given by ASP.Net based on browser/server(B/S) structure,it can design processes such as reverse osmosis,desalination by ion exchange,softening and save the equipments parameters and product water ion composition in database,ultimately form design documents.In addition,it allows multiple user to design simultaneously.As a module of the MIS,it makes the management easier and eliminates the trouble of installation and maintenance in client server.
Design and Implementation of Remote Experiment Teaching System Framework under B/S Mode

Liu Shaoying

DOI: https://doi.org/10.1109/icmtma52658.2021.00129

2021-01-01

Abstract:For the shortage of experimental resources in multiple schools, this paper develops a virtual experiment platform of information security based on Web services. The system adopts B/S architecture to build a remote laboratory. The whole system is divided into three layers, including field equipment layer, data layer and presentation layer. The database uses Microsoft's development tools and chooses the visual integration platform. The system also realizes user management, information query, online learning, online testing, experimental report upload, message board and virtual experiment project management, using ASP.NET and SQL language to achieve the back-end database data analysis and processing. Finally, based on the modular design idea, the design and implementation process of each functional module are described in detail, and the system is fully tested and verified. After corresponding tests, the remote network experiment management platform is proved to meet the experimental teaching requirements of computer network course and achieve stable remote connection performance.
A Security Model Design in Web Service Environment

Zhang Mi,Cheng Zunping,Ma Ziji,Zang Binyu

DOI: https://doi.org/10.1109/CIT.2005.47

2005-01-01

Abstract:With the emerging applications based on Web Service, end-to-end security becomes more and more important. SSL and current XML security schemas cannot reach the demand of it. This paper proposes a novel security model -- ESM, which integrates some popular XML security schemas and constructs a layered model based on SOAP message transport mechanism. It's aiming at the end-to-end security issues in Web Service environment. Compared with other security models known to us, this model is more comprehensive and flexible.
Services-oriented URL Filtering and Verification.

Aili Wang,Chao Wang,Xi Li,Xuehai Zhou,Nadia Nedjah

DOI: https://doi.org/10.1504/ijhpsa.2013.058974

2013-01-01

International Journal of High Performance Systems Architecture

Abstract:Teenagers' online safety problem has become increasingly important. To tackle this problem, this paper proposes a services-oriented URL filtering and verification mechanism. A services-oriented browser architecture prototype has been implemented, named SOBA. SOBA is the first in literature that introduces SOA concepts into the web browser design paradigm. It contains a server cluster, which employs URL filter functions to verify the URL access, while whitelists and validation results are wrapped as services. Meanwhile, a customised SOBA client is in charge of data conversion and website navigation while verification workloads are deployed on the server side. Administrators can manage URL databases through back stage websites. A prototyping software browser of SOBA demonstrates that SOA concepts can greatly improve the online safety with high flexibility and modularity.
The Design and Implementation of the Secure Mechanism for an Internet-Based Secure Electronic Commerce System

王雪平,徐寿怀,张根度,荆金华

DOI: https://doi.org/10.3321/j.issn:1000-436x.2001.08.012

2001-01-01

Abstract:Our secure electronic commerce system, which has been successfully embedded into the popular Netscape Browser and Server on the Internet, is presented in the paper. We focus our attentions in this paper on the secure requirements related to infrastructure, the system architecture,the system function, and the key tech- niques. And we discuss secure mechanism related to electronic commercs system in detail.
Design and Implementation of the Security Mechanism for a Distributed Web-based Collaborative System on Drawing Documents in Construction Projects

Ma Zhiliang,Chen Yaoting

2010-01-01

Abstract:This paper aims to solve the security problem of existed centralized web-based collaborative system on drawing documents.Requirement analysis was carried out to determine the feature of the distributed web-based collaborative system on drawing documents in construction projects.Then the security mechanism of the system was established based on several information security technologies such as encryption,identity authentication,digital rights management.Based on the mechanism,the system was designed and implemented.In addition,a simulating use of the system was carried out to verify its feasibility and effectiveness.The result shows that the system can protect the intellectual property of the designer.
The Solution of Security of Web Application Based on PKI/PMI

Wu Peng,Su Xinning

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.06.001

2006-01-01

Abstract:At present,the main research fields of security technology are network security,security protocol and encryption arithmetic.The research of security of application layer is want,and ongoing research projects is part application oriented,such as safe mail system,safe document system.This paper designs a Web application security total solution based on PKI/PMI,to implement security control for application layer,and proposes the method to implement by an instance.

A Resolvment of the Web Security Based on B/S Structure

Research on security extensions based on Java 2 security architecture

Research on Information Security Model and Security System Design

Construction of security architecture of web services based EAI

The balance between security and performance in electronic business

Convenient Conversion from C/S Structure to B/S Structure based on IntraWeb Technology

Technique of Access Control Based on B/S System

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Development of A Web System for Water Quality Monitoring Information Management

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Business Activity-Oriented Security Model of Information Systems

A System Framework of Security Management in Enterprise Systems

A Business Process-based Method on Security Requirement Analysis of Information Systems

Architecture of Multi-Dimension Web Application Security Based on OWASP and WASC

Implementation of Water Treatment Process Design Based on the B/S Structure

Design and Implementation of Remote Experiment Teaching System Framework under B/S Mode

A Security Model Design in Web Service Environment

Services-oriented URL Filtering and Verification.

The Design and Implementation of the Secure Mechanism for an Internet-Based Secure Electronic Commerce System

Design and Implementation of the Security Mechanism for a Distributed Web-based Collaborative System on Drawing Documents in Construction Projects

The Solution of Security of Web Application Based on PKI/PMI