企业安全策略下的跨平台数据同步-中英文翻译

1、淮海工学院毕业设计（论文）外文资料翻译系（院）：计算机科学系专 业：计算机科学与技术姓 名：王琴学 号：3202000142夕卜文出处：Data Synchroni zati on OverDifferent Platforms UnderEn terprise Security Policy附 件：1.外文资料翻译译文；2.外文原文。指导教师评语：外文资料的选材比较正确，内容是企业安全策略下的跨平 台数据同步的方法。译文基本准确，该同学认真地完成了外文 资料翻译任务。签名：2004年4月16日注：请将该封面与附件装订成册。附件1外文资料翻译译文企业安全策略下的跨平台数据同步摘 要：本文探讨了

2、跨平台数据同步的方法，并举例说明了在企业安全策略下实现跨平台数据同步在设计Intranet自动化工具中的应用。关键词：企业安全策略、Intranet自动化工具、Socket通信、组件化编程1.引言关于B-S开发模式的好处已经被讨论了很多，Intranet自动化工具在现 代企业办公自动化中的应用正日益普及。随着现代企业朝着国际化、集团化的方向发展，现代企业内部各部门之 间出现了分工细密化和分布全球化的趋势。分工细密化和分布全球化的趋势 使得各部门之间难以找到一个较完整的可共享的数据和可适用于各部门间 独立管理的工具，各部门在开发自己的Intranet自动化工具的时候会根据本部门的特点和资源条件选

3、择自己的Intranet发布平台。一方面，部门原 有的数据发布平台在一定程度上影响了部门对Intranet发布平台的选择；另一方面，在选定了自己的Intran et发布平台的同时，原来与其他部门共 享数据的部门也相应地选择了自己的数据发布平台。同时，现代企业内部各部门之间的协同工作也越来越密切，不同部门之 间通常需要访问的数据能同步更新，或者至少能在一定的时间间隔内进行数 据同步。虽然大部分的数据库产品都有自己的基于TCP/IP的访问方式，但在企业安全的策略下，各部门通常会更改对IP端口的访问方式的配置，并开发出自己的内部数据访问工具；有的部门即使使用了数据库产品的默认设 置，也很少公开数据库

4、访问的用户名和密码。因此，在各部门之间通过数据 库客户端访问工具进行直接的跨平台数据访问与同步几乎不具备可行性。本文是笔者在摩托罗拉中国软件中心实习期间参与开发Intranet自动化工具的设计开发过程中面临的数据同步问题解决方案的总结。2.几种跨平台数据同步方案在介绍常用跨平台数据同步方法之前有必要简要介绍一下所开发的In tra net自动化工具的设计目的和状况。所开发的Intranet自动化工具是运行在 Windows NT平台上的ASP应用 程序，其设计目的是将本地Windows NT平台上的 CR Tracking （ ChangeRequest Tracking,变更需求跟踪）Acc

5、ess数据库与美国UNIX平台上含有CR跟踪信息的 Rational ClearDDT（Distributed Defects Tracking System, 分布式错误跟踪系统。以下简称DDTS数据库进行同步更新，以实现与本项 目相关的CR信息的本地 Web访问和跟踪。在数据同步中要求实现的功能包 括：获取DDTS数据库中的新数据用于 Access数据库的添加、获取DDTS数 据库中指定纪录的字段值用于 Access数据库的更新。在接手进一步开发Intran et自动化工具之前，本项目组已经有了一个CR跟踪的Intranet工具，使用该工具可以进行CR的输入、修改、查询和列 表统计。该In

6、tranet工具要求与CR相关的人员主动使用 DDTS工具查询相 关CR的信息，并将信息在Web录入页面上输入到Web服务器上的本地数据 库，供CR跟踪使用。这种Intranet工具使用的数据同步方法是利用 DDTS 数据访问工具，手工数据同步。该数据同步的方法实现简单，但操作繁琐， 特别是在查询时需要重复性地输入类似的 SQL语句，使得这项工作显得枯燥 无味。从严格意义上讲，这不能算是一种跨平台数据同步的解决方案。考虑到大部分的数据库产品都有自己的基于 TCP/IP的访问方式，要求相 关部门开放数据库的IP端口访问及受限的用户名和密码给Intranet开发人 员也许是一个简单的实现跨平台数据

7、同步的方法。使用这种方法，只需在Win dows NT Web服务器中安装相应的ODBC区动程序，然后在设计 ASP程序 时使用ADO编程，进行数据的简单查询和添加、修改即可进行跨平台数据同 步，设计十分简单。但这种方法存在两方面的问题：一是在开放数据库IP端口访问的用户名和密码的同时，即给该数据库所在部门带来了安全隐患， 一旦Web服务器受到攻击而使用户名和密码被窃取，开放的数据库也就处在 被攻击的风险之中；二是有的部门使用的是第三方开发的基于数据库的工具（如DDTSE具），其部门本身并没有数据库的管理权限，因而也就无法添加 用户名和分配权限。在开发过程中，采用基于Socket通信的跨平台数

8、据同步方法。3 . 一种基于Socket通信的跨平台数据同步方法基于Socket通信的跨平台数据同步方法采用客户机/服务器的概念，在 分属于不同部门的不同平台的计算机上分别开发负责侦听的Socket服务器和负责连接的Socket客户端。以获取DDTS据库中指定纪录的字段值为例， 当客户端和服务器连接成功时，客户端向服务器发送相关CR的关键字以及需要获取的字段名，服务器通过调用DDTS工具的相应命令来获得客户端所需要的字段数据并发送给客户端。Socket服务器运行在DDTS所在的美国UNIX主机上，采用多进程编程。 编程过程中，对建立连接时产生的EINTR错误的处理和对SIGCHLD信号的处 理

9、是关键，如果处理不好，将会出现无法多次连接和连接关闭后导致僵死进 程的情况。在开发过程中，使用popen函数运行一个perl脚本获取所需的数据并将其通过管道返回程序，该脚本使用DDTS工具来获取数据。这种方法充分利用了已有工具和 perl语言的灵活性，降低了开发难度。为了确保 侦听程序始终运行，采用了在 UNIX主机的系统cron tab里添加了一条指令 使得系统每隔一分钟检查侦听程序 scksvr是否正在运行，并在因系统异常 导致其中断运行的情况下重新启动。客户端运行在 Windows NT平台上，采用 Microsoft Visual C+ 的ATL (Active Template Li

10、brary )模板 COMf 发和 MFCSocket 编程做成一个 COM 组件。使用COMS件可以避免在多个 ASP文件中使用 Win sock ActiveX控件 进行编程，实现代码复用。该COM组件还用于一些 VBScript脚本，这些VBScript脚本使用该COMA件并访问本地数据库实现数据的同步，具体实现 的是自动获取DDTSh的当天CR到本地数据库并发送E-mail给相关人员、 指定条件获取DDTSh的CR到本地数据库并发送E-mail给相关人员、自动 更新正在进行的CR的状态、根据CR和人员进行的工时收集、CR统计与跟踪 等任务，可以使用 WindowsNT的Schedule

11、 Service来定时运行这些 VBScript 脚本实现数据的定时自动同步。4.结束语本文分析了在企业安全策略下跨平台数据同步面临的问题和几种数据同 步方法，在分析手工同步和开放数据库访问IP端口的利弊基础上提出了一种基于Socket通信的数据同步解决方案。在实现基于Socket通信的数据同步时，服务器端充分利用了已有的工具和perl语言的灵活性；根据实现Intranet自动化工具的需要，客户端使用了 Visual C+的ATL模板设计了 一个Socket客户端COMS件。在设计的自动化工具中，利用 WindowsNT的Schedule Service实现CR的定时自动同步、更新及发送通知E

12、-mail等任务， 使用ASP设计对本地数据库访问的交互页面进行CR跟踪。在实际使用中，这种方案很好地满足了设计目的，与原有In tra net工具相比，大大降低了所有项目组成员在CR跟踪上所贡献的时间和精力。附件2:外文原文（复印件）Data Synchroni zati on Over Differe nt Platforms Un der En terpriseSecurity PolicyAbstract: This paper discusses methods of data synchroni zati on overdifferent platforms. Then it gi

13、ves an example to illuminate the applicati on of impleme ntati on of data syn chr oni zati on over different platforms underenterprise security policyin the desig n of i ntranet automatic tools.Key Words: Enterprise Security Policy, Intranet Automatic Tools,Socket Com mun icatio n, Comp onen tial Pr

14、ogrammi ng1. in troducti onHave bee n discussed as for B- S developp ing the adva ntage of the modea lot of, the Intranetautomation tool transacts the applicationin the automati on in the moder n bus in ess en terprise in creas in gly uni versal.Alo ng with moder n bus in ess en terprise towards the

15、 directi onthatintern ati on alizati on,grouptur ndevelops,moder n bus in essen terprise in ter nal and each secti on a trend forappeari ng cent workclosely turning with distributing world turning.The cent work is close to turn to turn to makewith the world that distribute the trend each section a d

16、ata for hardly finding out aly more completely sharing with applicably the tool of the independence managementamongeach section, each secti on will choose with the resources term accord ing to the characteristics of thissectionat the time of developpingownIn tra net automat ing the tool own Intranet

17、 announ ces the terrace. On the other hand, the origi nal data in secti on announ ces the terrace to affected the secti on to announce the choice of the terrace to the In tra net on the certa in degree; On the other hand, at make selecti on own Intranet announce the terrace at the same time, share w

18、ith other secti on the secti on of the data origi nally too the ground of cowgirl chose own data announ ces the terrace.At the same time, moder n bus in ess en terprise in ternal and eachsecti on a data for being in conj un cti on with work too more and moreclosely,differentsectionusuallyneeding vis

19、ittingcan renewsynchronously,or at least can in certain time partition theproceed ing data is synchrono us.Although big and part of databases product has own accord ing to TCP/ IP in terview method, the strategy in en terprise security is n ext, each secti on will usually cha nge to in stall to the

20、port of IP in terview method, combi ning to develop anown in ternal datain terview tool;Thesecti on ofhav ing used eve n thetacit approval of the database product establishes, and also fewpublic the customer of the database in terview with password.Therefore, pass the database between each each sect

21、ion the customer carry to visit the tool proceed the direct cross-platform data in terview with do not have the possibility synchrono usly and almost.This text is summarythat the synchronous problem in data solution that the writer faces in motor pull period of Chinese software center practice parti

22、cipate Intranet that develop design development process automate tool.2. Syn chr onous project in data in a few cross-platformsHave the n ecessary syn opsis in troductio nbefore in troduc ingsyn chr onous method in data in in com mon use cross-platform once anIntranet for developping automates the d

23、esign purpose of the tool with the con diti on.An Intranet for developp ing automati on tool is a Rati onal to circulates in the applied procedure in Win dows NT the ASP on the terrace, its desig n purpose is asce nd with the UNIX terrace of the UnitedStates the nativeWindows NT the CR on the terrac

24、eTrack ing( Change Request Track ing, cha nge n eed follow) the database of Access to imply CR follow the in formati on ClearDDTS( Distributed Defects Track ing System, the distribute type mistake follows the system.Below brief n ame DDTS) the database proceeds the syn chr onous renewal, toing reali

25、ze with the native Web of the related the information of CRin this item visit with follow.Request synchronously and in side in the data the fun cti on that realizes in clude:The new data that obta in the DDTS database middle fin ger the database of Access DDTSdatabase in side useds for the word a va

26、lue in crease, obta ins the record settles the ren ewal useds for the database of Access.Before taki ng up further developme nt Intranet automati on tool,this item a the tool of Intranet for thering has been a CRfollowing, use that tool can proceed the CR importati on, modificati on, search with row

27、 form statistics.The Intranets tool requests to search with active usage in related pers onnel in CR DDTS tool the in formatio n of the related CR, combi ning to in put in formatio n to the server of Web n ative database in Web record ing into page, providi ng the CR follow the usage.The synchronous

28、 method in data of this kind of Intranet toolusage is to makes use of the DDTS data the in terview the tool, han dicraft data is synchrono us.The synchronous method in that data realizes simple, but the operationis tedious, especially whilesearchi ng the dema nd repeats sex a SQL for in putt ingsimi

29、larlyIan guage senten ce, make this work seemed to be dull.Speak from the strict meaning, there in no be regarded as the syn chr onous solutio n in data in a kind of cross-platform.In con siderati on of big and part of databases product has ownaccord ing to TCP/ IP in terview method, request the IP

30、port in terview related secti on ope ns the database and is customer by the limit develops the Intranet the pers onnel with the password perhaps is a realizes in brief syn chr onous method in data in cross-platform.Use this kind of method, a simple search for n eed ing in Win dows NT Web server inst

31、allinghomologous ODBCdrivingprocedure, then whiledesig ning ASP procedure usage ADO weav ing dista nee, proceed ing data within crease,the modificatio n can immediately proceed thecross-platform data syn chr ono us, desig n very and in brief.But this kind of method exsits the problem of the both sid

32、e:While ising in customer a risk for with password at the sametime, then bringing the databases place section safe getting,once the server of Websufferingattack and usage nameof account with password burglarizingtaking, liberal database too being placed in drive attackstoningthatope n database IP po

33、rt in terview;Two what certa in secti ons uses arethe third square the developme nt of accord ing to the tool( such as the tool of DDTS) of the database, its secti on on eself man ageme nt without database legal power, as a result also cant in crease customer with assig n the legal power.In develop

34、process, adoption according to the cross-platform data that Socket corresp ondence synchronous method.3. A kind of according to Socket correspondence of cross-platform data syn chr onous methodAccord ingto Socket corresp ondence of cross-platform datasyn chr onous the method adopts the con cept of c

35、ustomers mach ine/ server, the calculati on accord inglying bel ong to in the differe nt secti on in differe nt terrace is on board disti nguish developme nt resp on sible for the server of Socket that hear with resp on sible for the copular the customer of Socket carries.Regard obtaining the word a

36、 value that DDTSdatabase middle fin ger settle record as word a that a key word for, being customer carrying with server linking success, customer carrying sending out to server related CRand demandsobtain, the server pass to adjust to acquire with the tool of DDTS cowgirl order the word that custom

37、er need when carrying a data erupts to give the customer carries.The server of Socket circulates the Un ited States in the place of DDTSUNIXhost the top, adoption manyprogress plait distance.Plaitdista nee process in side, produces to han dies falsely with han dies to the sig nal of SIGCHLD to the h

38、our of eonj un eti on that establish the EINTR is eireumsta nee that key, if han die n ot good, willi ng appear cant link with link to eause the progress after elosing manytimes.In develop proeess, the usage popen funetioneireulates a perl the datathat seript n eed whe n obta ining eomb ines its pas

39、s the pipi ng return the proeedure, that seript usage DDTS tool to obta in the data.This kind of method made use of to there has bee n the tool well with the perl pho netic and vivid, loweri ng the diffieulty of developme nt.For in suri ng the hears the proeedure to circulate always, adopti ng to in

40、 crease in system in the host of UNIX cron tab an in strueti on make the each in system penny clock check 侦 hear the proeedure seksvr whether in the moveme nt, and start afresh un der the situati on of eausing break amongthem the movementunusually because of the system.The customer carries to circul

41、ate on the terrace of Win dows NT, adoptio n Microsoft Visual C+ of the ATL( Active Template Library) template COM developme nt makes into a COM module with the MFC Socket plait dista nce.The usage COM module can avoid using in several ASPs docume nt the Win sock ActiveX eon trols the piece proceeds

42、 to weave the distanee, realizing the code reply to use.The COMsmodule still useds for the some the script of VBScript, these the script of VBScriptses use the COMs module and visit the n ative database realizes data of synchronous, realizes in a specific way of obtain the top of DDTSthat very day C

43、Rautomatically the native database erupt to send to E- mail to related pers onnel and specify the CR term obta in the top of DDTS the n ative database erupts to send to E- mail to related pers onnel and renew automatically un der way of CR appeara nee, accord ing to CR is with the man-hour that pers

44、 onnel proceed collect, the CR statisticses with follow to wait the missi on, can use the Win dows NT Schedule Service to settle luck a these the script of VBScriptseses realizes the data settles hour auto synchrono us.4. End Ian guageThis text under the enterprise security strategy analyzed problem that cross-platform data synchronouslyface with