一種基于HTML5的安全跨文檔消息傳遞方案
發(fā)布時間：2019-04-08 17:05
【摘要】：全面分析現(xiàn)有基于HTML5的跨文檔消息機制的安全性,指出其中存在的安全風(fēng)險,并在此基礎(chǔ)上設(shè)計和實現(xiàn)了跨文檔消息傳遞方案SafePM.SafePM引入消息安全規(guī)則白名單,通過雙向檢測機制實現(xiàn)對消息收發(fā)的完全控制,通過消息內(nèi)容安全控制機制消除內(nèi)容中的安全隱患.同時加入自動安全檢測以及安全規(guī)則隱藏等機制,從而防止消息泄露和篡改,減少跨站腳本執(zhí)行的風(fēng)險,實現(xiàn)安全的跨文檔消息傳遞.
[Abstract]:This paper analyzes the security of the existing cross-document message mechanism based on HTML5, points out the security risks existing in it, and designs and implements the cross-document messaging scheme SafePM.SafePM to introduce the message security rules whitelist. Two-way detection mechanism is used to realize complete control of message receiving and sending, and message content security control mechanism is used to eliminate the security hidden trouble in the content. At the same time, automatic security detection and security rule hiding are added in order to prevent message leakage and tamper, reduce the risk of execution of cross-site scripts, and realize secure cross-document message delivery.
【作者單位】： 中國科學(xué)院研究生院國家計算機網(wǎng)絡(luò)入侵防范中心;
【基金】：國家自然科學(xué)基金(60970140)資助
【分類號】：TP393.08
[Abstract]:This paper analyzes the security of the existing cross-document message mechanism based on HTML5, points out the security risks existing in it, and designs and implements the cross-document messaging scheme SafePM.SafePM to introduce the message security rules whitelist. Two-way detection mechanism is used to realize complete control of message receiving and sending, and message content security control mechanism is used to eliminate the security hidden trouble in the content. At the same time, automatic security detection and security rule hiding are added in order to prevent message leakage and tamper, reduce the risk of execution of cross-site scripts, and realize secure cross-document message delivery.
【作者單位】： 中國科學(xué)院研究生院國家計算機網(wǎng)絡(luò)入侵防范中心;
【基金】：國家自然科學(xué)基金(60970140)資助
【分類號】：TP393.08
【相似文獻(xiàn)】
相關(guān)期刊論文 前10條
1 龍奇;;新一代網(wǎng)絡(luò)技術(shù)標(biāo)準(zhǔn)HTML5的研究[J];科技信息;2011年10期
2 劉天寅;;HTML5與未來的WEB應(yīng)用平臺[J];陰山學(xué)刊(自然科學(xué));2010年02期
3 顧e，
本文編號：2454759
本文鏈接：http://www.wukwdryxk.cn/guanlilunwen/ydhl/2454759.html
最近更新
教材專著
