A secure, cost-effective, and performance-optimized online social Web service

安全、经济高效且性能优化的在线社交 Web 服务

• 批准号: 463810-2014
• 负责人: Niu, Di
• 金额: $ 0.91万
• 依托单位: University of Alberta
• 依托单位国家: 加拿大
• 项目类别: Engage Plus Grants Program
• 财政年份: 2014
• 资助国家: 加拿大
• 起止时间: 2014-01-01 至 2015-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=558641
• 关键词: secure; cost; effective; performance; optimized

In the completed Engage project, a preliminary version of the social networking website for bridgingchina.ca was constructed with interface to Sina Microblog social networking site via OAuth 2.0. Currently under testing, several important steps remain before bridgingchina.ca can be taken into staging and eventually into production. These steps are centered around the issues of security, hosting and operational cost, performance, user data management, logging and analysis. In this continued project, we first aim to strengthening the security of the developed PHP and Mysql code so that the user information including password are strongly encrypted and protected and that malicious attacks to the database such as SQL injections can be detected and handled. Second, detailed cost analysis will be conducted to compare between dedicated servers, rented virtual hosts and cloud computing. Especially, the autoscaling mechanism of frontend servers as well as backend database via Amazon EC2, rackspace and possibly other cloud providers will be studied in detail to minimize the company operational cost. Third, several optimizations regarding page download and database query speed will be conducted to reduce the response time. Finally, detailed data analysis, logging and synchronization functions will be incorporated to handle the user data analysis and cleaning, move and synchronize data automatically between the testing server, staging server, and backup server. The objective is to continue to fix the problems found in the current version of code to build a secure, cost-effective and high performance website that matches production quality.

在已完成的Engage项目中，构建了bridgingchina.ca社交网站的初步版本，并通过OAuth 2.0与新浪微博社交网站接口。目前正在测试中，在bridgingchina.ca可以进入阶段并最终进入生产之前，还有几个重要的步骤。这些步骤围绕安全性、托管和运营成本、性能、用户数据管理、日志记录和分析等问题展开。在这个持续的项目中，我们的目标首先是加强开发的PHP和Mysql代码的安全性，使用户信息（包括密码）得到强有力的加密和保护，并可以检测和处理对数据库的恶意攻击，如SQL注入。其次，将进行详细的成本分析，以比较专用服务器、租用虚拟主机和云计算。特别是，将详细研究前端服务器以及后端数据库通过Amazon EC2，rackspace和其他云提供商的自动扩展机制，以最大限度地降低公司运营成本。第三，将对页面下载和数据库查询速度进行多项优化，以减少响应时间。最后，详细的数据分析，记录和同步功能将被纳入处理用户数据的分析和清理，移动和同步数据之间的测试服务器，登台服务器和备份服务器自动。我们的目标是继续修复当前版本代码中发现的问题，以建立一个安全，具有成本效益和高性能的网站，以满足生产质量。