Design of Lightweight Web Page Tamper-Resistant Mechanism for Linux
Resisting malicious Web page tampering is critical to provide robust web services.Existing Web page tamper-resistant solutions either require extra equipments (e.g., storage equipments or content distribution systems), or suffer from significant performance degradation.In this paper, we design and implement a lightweight Web page tamper-resistant system for the Linux system.In our design, we adopt the system call interception, event-trigger mechanism, the attribute of Linux file system, and combine them together to resist tampering attempts to the Web page files.Our solution is very lightweight and does not require any additional storage equipments or content distribution systems.We implement a prototype of our mechanism on Linux with kernel version 2.6, and deploy it in a campus Web server.Experiment results show that our mechanism can effectively protect Web page files from being tampered, incurring only negligible increase in response delay and CPU utilization ratio.
Web page tamper-resistance system call interception event-trigger Linux
Ang Mi Weiping Wang Shigeng Zhang Hong Song
School of Information Science and Engineering,Central South University,Changsha 410083
国际会议
The 5th International Symposium on Cyberspace Safety and Security ( CSS2013)(第五届国际网络空间安全和安保研讨会)
张家界
英文
29-39
2013-11-13（万方平台首次上网日期，不代表论文的发表时间）