| 摘要 |
A system and a method for securing web applications against intrusion are provided to apply a security policy to each layer in detail and hierarchically search the security policy by hierarchically discriminating a URL(Uniform Resource Locator) from a domain to a sub parameter, and minimize memory usage by performing management after separating an original copy including all URLs/security policies and a copy including a part of the URLs/security policies. A web security manager(210) includes the copy of the original copy comprising the URLs and web security policy information set to the URLs. A web security server(230) sequentially assigns a URL ID by discriminating the URLs in domain, directory, file, parameter, and sub parameter order. If the URL ID of the URL requested from a client is not found in the original copy of the web security manager, the web security server assigns the URL ID to the discriminated domain, directory, file, parameter, and sub parameter, and registers the security policy corresponding to the URL ID from the original copy of the web security manager.
|
