【正文】 erverSupportFunction API 可以設(shè)置響應(yīng)的 HTTP 報(bào)文的狀態(tài)，通過 WriteClient可以直接向客戶端寫數(shù)據(jù)。 _pfcServerSupportFunction(SF_REQ_SEND_RESPONSE_HEADER, const_castchar*(status), NULL, NULL)。 _pfcWriteClient(const_castchar*(msg), amp。 } (3) 發(fā)送文件 發(fā)送文件的實(shí)現(xiàn)和發(fā)送信息的實(shí)現(xiàn)類似。發(fā)送的文件內(nèi)容從該路 徑指定的文件中讀取。 char buffer[BUF_SIZE] = {0}。 ifstream in(filename, ios_base::binary)。 for(。 nCount = ()。 _pfcWriteClient(buffer, amp。 } } } (4) 重定向 將服務(wù) 器端響應(yīng)的 Http 報(bào)頭中的狀態(tài)碼設(shè)置為“ 302 Moved Permanently ”，同時(shí)設(shè)置報(bào)頭中的 Location 為要轉(zhuǎn)向的地址。重定向的部分實(shí)現(xiàn)代碼如下 void IISClient::Redirect(const char *url) { char buf[256]。 _pfcAddResponseHeaders(buf)。 return。在 Windows 2020 的服務(wù)器上配置 IIS 的 ISAPI Filter 的步驟如下： (1) 打開 IIS 管理器 (2) 展開左側(cè)的目錄樹，選擇網(wǎng)站，單擊鼠標(biāo)右鍵，選擇屬性 (3) 選擇 ISAPI 篩選器一欄 (4) 點(diǎn)擊添加按鈕，篩選器名稱填“ WebIPS”，可執(zhí)行文件選擇 WebIPS所在的路徑，單擊確定添加完畢。 在完成上述步驟后，通過瀏覽器訪問下服務(wù)器所在的網(wǎng)站，如果狀態(tài)欄變?yōu)榫G色向上箭頭，說明系統(tǒng)已經(jīng)可以正常工作，否則說明 ISAPI Filter 沒有加載成 功。 C++實(shí)現(xiàn)的策略效率高但因?yàn)椴捎糜簿幋a的方式集成到系統(tǒng)中，除了少量的數(shù)據(jù)信息可以通過配置文件在加載時(shí)動(dòng)態(tài)配置外，其策略的邏輯無(wú)法靈活 的修改。雖然腳本方式的策略在效率方面低于 C++實(shí)現(xiàn)的策略，我們可以根據(jù)服務(wù)器的配置及需求在 C++實(shí)現(xiàn)的策略高效和腳本的方便靈活上找到一個(gè)平衡點(diǎn)。 對(duì)策略的封裝 要讓 Lua 作為策略的腳本語(yǔ)言首先得完成對(duì)策略的封裝。由于 Lua 的特性，可以在 C++ 中很方便的調(diào)用 Lua 編寫的函 數(shù)，所以可以在 Lua 策略腳本中，通過 Lua 函數(shù)的方式提供策略引擎所需要的 OnRecv 和 OnSend 接口。我們需要將此對(duì)象封裝成 Lua 腳本能識(shí)別的形式。 Lua 策略腳本示例 使用 Lua 語(yǔ)言編寫策略腳本非常簡(jiǎn)單，下面是一段用來過濾 SQL 注入關(guān)鍵字的 Lua 策略腳 本示例： warning_msg = [[ html head meta equiv=ContentLanguage content=zh meta equiv=ContentType content=text/html。 end end function CheckSqlKey(str) local test_key = {and, or} str = (str) for i,v in ipairs(test_key) do if (str, v) then return true end end return false end 基于 xml 的策略管理 在這套系統(tǒng)中，我們通過 xml 配置文件來管理策略的信息。例如，我們將上面的 lua 腳本保存為 后 可以使用如下的 文件使系統(tǒng)加載該策略。按照上面的 xml 文件信息所示， 應(yīng)該存放在 Policy 目錄下。使用的測(cè)試的用例如下： (1) 緩沖區(qū)溢出防御的檢測(cè)：發(fā)送的 HTTP 協(xié)議中包含超長(zhǎng)的字段。 (2) SQL 注入防御：在發(fā)送的 url 字段中包含 SQL 注入的關(guān)鍵字。 (3) 多線程控制：在策略中設(shè)置限制同一個(gè) IP 的訪問線程為 3。如果迅雷能以 3 個(gè)線程下載服務(wù)器文件則測(cè)試通過。 經(jīng)過測(cè)試，系統(tǒng)能有效地?cái)r截前面所介紹的對(duì) Web 服務(wù)器的安全威脅。提供方便的編寫策略腳本的機(jī)制，方便 Web 服務(wù)器管理員配置安全的 Web 服務(wù)器環(huán)境。這套入侵防御系統(tǒng)也存在一些需要完善的地方，比如目前直接使用編輯配置文件和策略腳本的方式來更新配置，如果能使用 UI 管理策略和系統(tǒng)，能使這套系統(tǒng)的使用更加方便。由于采用靈活的策略插入機(jī)制，所以可以通過策略增加系統(tǒng)的功能。在此向他表示我最衷心的感謝！ 在論文完成過程中，本人還得到了其他老師和許多同學(xué)的熱心幫助，本人向他們表示深深的謝意！ 最后向在百忙之中評(píng)審本文的各位專家老師表示衷心的感謝！ 作者簡(jiǎn)介 姓 名：林 海峰 性別： 男 出生年月 ： 民族 ： 漢 Email： 聲 明 本論文的工作是 2020年 2月至 2020年 6月在成都信息工程學(xué)院網(wǎng)絡(luò)工程系完成的。除非另有說明，本文的工作是原始性工作。 （ 2）學(xué)校可以采用影印、縮印或其他復(fù)制方式保存學(xué)位論文。 （ 4）學(xué)?？稍试S學(xué)位論文被查閱或借閱。 除非另有科研合同和其他法律文書的制約，本論文的科研成果屬于成都信息工程學(xué)院。 but Montfermeil was none the less a village. Retired clothmerchants and rusticating attorneys had not discovered it as yet。 only, water was rare there, on account of the elevation of the plateau. It was necessary to fetch it from a considerable distance。 but this good man only wor ked until seven o39。 and night once e and the shutters on the ground floor once closed, he who had no water to drink went to fetch it for himse lf or did without it. This constituted the terror of the poor creature whom the reader has probably not fotten,little Cosette. It will be remembered that Cosette was useful to the Thenardiers in two ways: they made the mother pay them, and they made the child serve them. So when the mother ceased to pay altogether, the reason for which we have read in preceding chapters, the Thenardiers kept Cosette. She took the place of a servant in their house. In this capacity she it was BOOK CHAMPMATHIEU AFFAIR CHAPTER II THE PERSPICACITY OF MASTER SCAUFFLAIRE From the townhall he betook himself to the extremity of the town, to a Fleming named Master Scaufflaer, French Scaufflaire, who let out horses and cabriolets as desired. In order to reach this Scaufflaire, the shortest way was to take the littlefrequented street in which was situated the parsonage of the parish in which M. Madeleine resided. The cure was, it was said, a worthy, respectable, and sensible man. At the moment when M. Madeleine arrived in front of the parsonage there was but one passerby in the street, and this person noticed this: After the mayor had passed the priest39。 then he paused again and stopped short, as though in thought, and afte r the lapse of a few seconds, instead of allowing the knoc ker to fall abruptly, he placed it gently, and resumed his way with a sort of haste which had not been apparent previously. M. Madeleine found Master Scaufflaire at home, engaged in stitching a harness over. Master Scaufflaire, he inquired, have you a good horse? Mr. Mayor, said the Fleming, all my horses are good. What do you mean by a good horse? I mean a horse which can travel twenty leagues in a day. The deuce! said the Fleming. Twenty leagues! Yes. Hitched to a cabriolet? Yes. And how long can he rest at the end of his journey? He must be able to set out again on the next day if necessary. To traverse the same road? Yes. The deuce! the deuce! And it is twenty leagues? M. Madeleine drew from his pocket the paper on which he had pencilled some figures. He showed it to the Fleming. The figures were 5, 6, 8 1/2. You see, he said, total, nieen and a half。 he is a small beast from Lower Boulonnais. He is full of fire. They wanted to make a saddlehorse of him at first. Bah! He reared, he kicked, he laid everybody flat on the ground. He was thought to be vicious, and no one knew what to do with him. I bought him. I harnessed him to a carriage. That is what he wanted, sir。 he goes like the wind. Ah! indeed he must not be mounted. It does not suit his ideas to be a saddlehorse. Every one has his ambition. `Draw? Yes. Carry? No.39。s breathing spell midway of the road。 and some one must be by while he is eating to prevent the stable boy of the inn from stealing his oa