基于訪問控制機理的簡單對象協(xié)議安全加固研究.pdf

1、華中科技大學(xué)碩士學(xué)位論文基于訪問控制機理的簡單對象協(xié)議安全加固研究姓名：彭碧濤申請學(xué)位級別：碩士專業(yè)：計算機系統(tǒng)結(jié)構(gòu)指導(dǎo)教師：陳曉蘇莫正坤20040510華中科技大學(xué)碩士學(xué)位論文AbstractSOAP(SimpleObjectAccessProtoc01)hasgainedmorepopularityindistribfitedapplicationsystembasedonnetworkHoweverithastobepointed

2、outthat，thereisnostandardaccesscontrolsecuritycriterioninSOAPprotocolsDifferentSOAPapplicationmaytakedifferentmethodtosolveaccesscontrolproblemm蛾iteasytobringaboutsecuritytroubleinapplicationsystemsHowtealizetheaccesscon

3、troltotheapplicationsourcebasedonSOAPprotocol，tolimittheaCCeSSthekeysourCe，avoidingthedestroythatunlawfulUserinvadeandlawfulusermakeawrongoperationtobringonhasbecametheimportantresearchcontentinthesoapresearchfieldBasedo

4、nsufficientanalysisofcurrentSOAPprotocolandaccesscontrol。toanalysethekeytechnologyanddrawconclusionontheaCCeSScontrolbasedonSOAPOnthebasisoftheconclusionunitingtheSOAPprotocolmaterialcharactersandtheXML(eXtensibleMarkupL

5、anguage)elementandcharacterofSOAPmessage，todesignaccesscontrolsystemSFGACS(Fine—GranularityAccessControlSystemBasedonSOAP)whichpossessthefinegranularityaccesscontrolcharacterViatheSFGACScontroltheapplicationsourceitcaIle

6、nforcethesecurityabilityofapplicationSOurceandimprovethesecufityofapplication。Thedesignpn‘nciple，basicfactorofSFGACSispresentedThentheframeworkofSFGACSisdescribedonthebasisofSOAPandaccess，correspondingalgorithmisalsogive

7、noutSFGACSincludesfourparts：SOAPprotocolsystem，userauthenticationsystem，certificatesystemandauthorizationfiltratingsystemSOAPprotocolsystemisresponsibleforbottomcommtmication，datadescriptionandRPC(RemoteProcedureCall)cal

8、lUserauthenticationsystemisresponsibleforanalyzingcertificationAuthorizationfiltratingsystemdealswithfiltratingauthorizationSFGACSincludesrealizationofSOAPprotocolandaCCeSScontrolfilterRealizationofSOAPprotocolincludesSO