A Security Web Gateway Based on HTTP Reverse Proxy

Abstract

In this paper, we try to solve the problems of traditional security protection technology, such as the structure coupling, the difficulty of module expansion and the performance bottleneck. A new web security gateway solution based on HTTP reverse proxy server is proposed and the related system design and implements of key technologies are introduced. We provide a new concepts that called Security Detection & Validate Chain (SDVC), based on SDVC and its hierarchical tree structure, and we can prevent network from attacking on the extensible way. This architecture can effectively resolve the difficult extending problem of the traditional web security protection problems. The web security gateway also can filter users by black & white list, and can restrict the resource access which needs to be protected, as well as matching & preventing many kinds of network attacking based on rules.