A webshell defense method based on mandatory access control mechanism

Abstract

The invention discloses a webshell prevention method based on a mandatory access control mechanism. The webshell prevention method comprises the following implementation steps: classifying web files and establishing a mandatory access control policy based on classification; obtaining object tags of target web files requested by a client, inquiring the mandatory access control policy to determine limits of authority corresponding to the target web files if the object tags are web application script files and determining whether to analyze and implement the target web files or not according to inquiry results; inquiring the mandatory access control policy to determine limits of authority corresponding to the target web files if the object tags are web multi-media files and determining whether to read the target web files or not according to inquiry results. The webshell prevention method has the benefits that webshell uploaded by an intruder can be prohibited from being analyzed and implemented, so that the intruder is prevented from implementing further damage through the webshell; the webshell is complete in prevention and has high safety and reliability, low cost and good universality.

Description

technical field [0001] The invention relates to the technical field of security access control of computer systems, in particular to a webshell prevention method based on a mandatory access control mechanism. Background technique [0002] At present, web applications are becoming more and more abundant, which provides great convenience for the work, life and entertainment of the majority of users. At the same time, web servers have gradually become the main attack target due to their powerful computing power, processing performance and high value. Security incidents such as SQL injection, webpage tampering, and webpage hanging horses occur frequently. In 2012, the National Computer Network Emergency Response Technology Coordination Center (CNCERT / CC) monitored and found that 52,324 websites in my country were implanted with backdoors, including 3,016 government websites, an average monthly increase of 213.7% and 93.1% respectively compared with 2011. Implanting a webshell i...

AI Technical Summary

Problems solved by technology

However, WAF is based on certain rules, and it is inevitable that there will be false negatives and false negatives, and it is impossible to accurately locate the webshell

In addition, WAF is often provided as a specific product, which is expensive and requires certain professional skills for configuration and use

In summary, the current webshell defense methods are difficult to prevent intruders from attacking in a timely and accurate manner

Images