信息安全研究 ›› 2016, Vol. 2 ›› Issue (8): 747-753.

• 技术应用 • 上一篇    下一篇

动态变换技术防御Struts2 S2-032 零日攻击研究

马蔚彦   

  1. 瑞数信息技术(上海)有限公司北京办事处
  • 收稿日期:2016-07-28 出版日期:2016-08-15 发布日期:2016-07-28
  • 通讯作者: 马蔚彦
  • 作者简介:首席安全架构师,主要研究方向为计算机网络安全、网络安全与管理架构.

Protection Against ZeroDay Exploit Struts2 S2-032 with Dynamic Morphism Technology

  • Received:2016-07-28 Online:2016-08-15 Published:2016-07-28

摘要: 随着企业信息化和应用系统的互联网化,互联网安全威胁从数量和种类上都在飞速增长.而传统的防护技术,在应对新型的互联网安全威胁,特别是零日漏洞和攻击、新型的自动化攻击方面,显现出明显的缺陷和力不从心,这些自动化攻击也称作网络机器人攻击(bots attacks).以近期著名的Struts2 S2032漏洞为例,分析创新的动态安全技术以及其防护特点,阐述其对此类新型威胁有效的防御机理,并根据其机理拓展分析其在当下热点的互联网威胁中更广的应用场景.

关键词: 机器人攻击, 动态变换, Struts 2, 零日攻击, 撞库, 多点低频攻击, 数据保护, 业务安全风险

Abstract: With the development of enterprise informatization and the internetenabled application system,the threats of cyber security are changing rapidly in quantity and variety. Traditional protection technology is showing obvious drawbacks in response to the emerging security threats, especially in the areas of zeroday attacks and automated attacks which are also called ‘Bots’. This article uses Struts2 S2032 vulnerability as an example to analyze the innovation of dynamic morphism technology and the effectiveness of its protection mechanism against Struts2 and other widespread cyber threats.

Key words: Bots, dynamic variation, Struts2, zeroday attacks, Credential stuffing, multisources and slow frequency attack, data protection, business security risk