Web-based management systems are increasingly replacing traditional terminal-based and Xwindows-basedsystems,Producing such a system seems to require a tremendous amount of laborious low-level coding due to theprimiti...Web-based management systems are increasingly replacing traditional terminal-based and Xwindows-basedsystems,Producing such a system seems to require a tremendous amount of laborious low-level coding due to theprimitive nature of CGI programming,it also suffes from the overhead of CGI processing ,perceived latency of Web re-spond and lack of security,we present ideas for the whole new HTTP/CGI Server to solve these problems and give ahigh performance to the management system.展开更多
Two common kinds of security mechanisms used in session initial protocol （S1P） are analyzed. An improved HTTP digest authentication scheme is put forward based on the existing SIP authentication theories. This mecha...Two common kinds of security mechanisms used in session initial protocol （S1P） are analyzed. An improved HTTP digest authentication scheme is put forward based on the existing SIP authentication theories. This mechanism is combined with the merits of the HTTP digest authentication and the public key encryption, so the communicating parties complete two-way authentication and public key exchange in pre-calling, and the session key can be randomly generated in post-calling. The mixture of security encryption mechanism with public key encryption and symmetric-key encryption algorithm can ensure the security for network communication data. The emulation of the scheme is verified, and the security analysis is conducted in the end. The researches show that the simulations efficiency of this method is about 78% of HTTP＇s, and it can prevent four kinds of attacks including impersonating a server, offline password guessing attacks, relay-attack, and session monitoring.展开更多
文摘Web-based management systems are increasingly replacing traditional terminal-based and Xwindows-basedsystems,Producing such a system seems to require a tremendous amount of laborious low-level coding due to theprimitive nature of CGI programming,it also suffes from the overhead of CGI processing ,perceived latency of Web re-spond and lack of security,we present ideas for the whole new HTTP/CGI Server to solve these problems and give ahigh performance to the management system.
基金Supported by the Central University Basic Research Special Fund Operating Expenses(2011ZM0033)
文摘Two common kinds of security mechanisms used in session initial protocol （S1P） are analyzed. An improved HTTP digest authentication scheme is put forward based on the existing SIP authentication theories. This mechanism is combined with the merits of the HTTP digest authentication and the public key encryption, so the communicating parties complete two-way authentication and public key exchange in pre-calling, and the session key can be randomly generated in post-calling. The mixture of security encryption mechanism with public key encryption and symmetric-key encryption algorithm can ensure the security for network communication data. The emulation of the scheme is verified, and the security analysis is conducted in the end. The researches show that the simulations efficiency of this method is about 78% of HTTP＇s, and it can prevent four kinds of attacks including impersonating a server, offline password guessing attacks, relay-attack, and session monitoring.
