NDLI: Integrated Detection of Attacks Against Browsers, Web Applications and Databases

Please wait, while we are loading the content...

Integrated Detection of Attacks Against Browsers, Web Applications and Databases

Content Provider	IEEE Xplore Digital Library
Author	Criscione, C. Salvaneschi, G. Maggi, F. Zanero, S.
Copyright Year	2009
Abstract	Anomaly-based techniques were exploited successfully to implement protection mechanisms for various systems. Recently, these approaches have been ported to the web domain under the name of "web application anomaly detectors" (or firewalls) with promising results. In particular, those capable of automatically building specifications, or models, of the protected application by observing its traffic (e.g., network packets, system calls, or HTTP requests and responses) are particularly interesting, since they can be deployed with little effort.Typically, the detection accuracy of these systems is significantly influenced by the model building phase (often called training), which clearly depends upon the quality of the observed traffic, which should resemble the normal activity of the protected application and must be also free from attacks. Otherwise, detection may result in significant amounts of false positives (i.e., benign events flagged as anomalous) and negatives (i.e., undetected threats). In this work we describe Masibty, a web application anomaly detector that have some interesting properties. First, it requires the training data not to be attack-free. Secondly, not only it protects the monitored application, it also detects and blocks malicious client-side threats before they are sent to the browser. Third, Masibty intercepts the queries before they are sent to the database, correlates them with the corresponding HTTP requests and blocks those deemed anomalous.Both the accuracy and the performance have been evaluated on real-world web applications with interesting results. The system is almost not influenced by the presence of attacks in the training data and shows only a negligible amount of false positives, although this is paid in terms of a slight performance overhead.
Starting Page	37
Ending Page	45
File Size	222403
Page Count	9
File Format	PDF
ISBN	9781424460496
e-ISBN	9781424460502
DOI	10.1109/EC2ND.2009.13
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-11-09
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Databases Training data Information security Detectors Telecommunication traffic Traffic control Frequency Computer networks Application software Protection
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Automated Protection of PHP Applications Against SQL-injection Attacks

Multi-Layered Defense against Web Application Attacks

Application of loop reduction to learning program behaviors for anomaly detection

Training MLP neural network to reduce false alerts in IDS

Casting out Demons: Sanitizing Training Data for Anomaly Sensors

Shielding against SQL Injection Attacks Using ADMIRE Model

MAGNA: modeling and generating network attacks

Detection of low-rate attacks in computer networks

Recurrent neural networks towards detection of SQL attacks

Integrated Detection of Attacks Against Browsers, Web Applications and Databases

Similar Documents

Automated Protection of PHP Applications Against SQL-injection Attacks

Multi-Layered Defense against Web Application Attacks

Application of loop reduction to learning program behaviors for anomaly detection

Training MLP neural network to reduce false alerts in IDS

Casting out Demons: Sanitizing Training Data for Anomaly Sensors

Shielding against SQL Injection Attacks Using ADMIRE Model

MAGNA: modeling and generating network attacks

Detection of low-rate attacks in computer networks

Recurrent neural networks towards detection of SQL attacks

Integrated Detection of Attacks Against Browsers, Web Applications and Databases