| 基于API监控的服务程序防御技术 |
| |
| 引用本文： | 王彤彤,韩文报,王航.基于API监控的服务程序防御技术[J].计算机工程与科学,2007,29(7):19-22. |
| |
| 作者姓名： | 王彤彤 韩文报 王航 |
| |
| 作者单位： | 解放军信息工程大学信息工程学院,河南,郑州,500002 |
| |
| 摘 要： | 目前大多数因特网应用都采用服务器／客户机模式，服务器程序安全对网络安全至关重要。本文提出了一种新的针对服务进程的防御技术，通过对关键API的拦截和安全性检查，可以发现大多数针对服务器程序的攻击．这种方法具有鲜明的特色：效率高，通用性好，漏报率低，误报率为零。实验表明，该方法能够防范一大类针对服务器程序的已
知和未知攻击。本文给出了该技术在Microsof IIS上的实现。
|
| 关 键 词： | 服务程序安全 API拦截 防御技术 |
| 文章编号： | 1007-130X（2007）07-0019-04 |
| 修稿时间： | 2006-08-292006-12-05 |
Server Program Defense Technology Based on API Monitoring |
| |
| WANG Tong-tong,HAN Wen-bao,WANG Hang.Server Program Defense Technology Based on API Monitoring[J].Computer Engineering & Science,2007,29(7):19-22. |
| |
| Authors: | WANG Tong-tong HAN Wen-bao WANG Hang |
| |
| Affiliation: | School of Information Engineering,PLA University of Information Engineering, Zhengzhou 500002,China |
| |
| Abstract: | Nowadays most Internet applications adopt the server/client model, and server security is very important for network security. The article introduces a new server program defense technology based on API monitoring. By API hijacking and security check, we can find attacks in time. This method is efficient and applicable. Our experiment shows this method is effective to many known and unknown attacks. We also give an implemention of the technology on Microsoft IIS. |
| |
| Keywords: | server program security API hijacking defense technology |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与科学》浏览原始摘要信息 |
|
点击此处可从《计算机工程与科学》下载全文 |
