基于Windows的在线判题系统的安全性研究-《计算机技术与发展》

文章信息/Info

Author(s):: LI Ding-cai; QU Shao-jun; HU Zheng; DUAN Bing; CHENG Xing-yi; TANG Qiang; College of Mathematics and Computer Science,Hunan Normal University

Keywords:: ACM/ICPC; online judge; Windows; sandbox; access control list; perfect Hash

摘要:: 在线判题系统（OJ）是ACM/ICPC竞赛选手用来进行程序设计练习和比赛的平台,现有OJ在遇到恶意提交代码方面经常造成服务器故障、崩溃或硬盘阻塞等安全威胁。为参加ACM/ICPC竞赛选手提供安全、可靠和高性能的OJ平台,在保证安全性的同时又不影响使用性。论文从源码级控制、应用程序级控制与防止恶意提交方面作了深入研究,提出基于sandbox（Windows沙箱）、ACL（访问控制列表）、完美哈希和帐号保密等技术的安全体系结构,通过在Windows下搭建OJ平台验证了采用此体系结构的OJ彻底解决了前面的安全问题。OJ安全可靠,性能优良

Abstract:: Online Judge（OJ）system is the platform for ACM / ICPC programming players,the existing OJs now meet the server trouble,service stop,hard disk choke and other security threats because of malicious submits.To provide safe,reliable and high performance OJ platform for ACM / ICPC programming players,ensure both the safety and the usability at the same time.Study from source-level control,application-level control and preventing malicious submits,put forward measures that based on sandbox（Windows sandbox）,ACL（Access Control List）,the perfect Hash,account security and other technical that formed security technical architecture,by practicing this architecture based on Windows,this architecture can solve all problems above,and was verified safe,reliable,and with good performance