DIWeDa - Detecting intrusions in web databases

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5094 LNCS, Issue , 2008, Pages 313-329

  Roichman, Alex ^a   Gudes, Ehud ^b  

^a OPEN UNIVERSITY OF ISRAEL   (Israel)

^b BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

Database vulnerability; Intrusion detection; SQL content classification; Web database security

Indexed keywords

CHLORINE COMPOUNDS; COMPUTER CRIME; COMPUTER SOFTWARE; DATABASE SYSTEMS; SECURITY OF DATA; SENSORS; SIGNAL DETECTION; SOLUTIONS; CLASSIFICATION (OF INFORMATION); COMPLEX NETWORKS; SOCIAL NETWORKING (ONLINE); TELECOMMUNICATION SERVICES;

BUSINESS LOGICS; DATABASE VULNERABILITY; INTRUSION DETECTION METHODS; INTRUSION DETECTION SYSTEM; INTRUSION-DETECTION SYSTEMS; OPERATING SYSTEMS; PRACTICAL SOLUTIONS; SESSION LEVELS; SQL CONTENT CLASSIFICATION; TRANSACTION LEVEL; WEB DATABASE SECURITY; WEB DATABASES;

INTRUSION DETECTION;

ANOMALY INTRUSION; CONTENT CLASSIFICATION; INTRUSION DETECTION METHOD; INTRUSION DETECTION SYSTEMS; PRACTICAL SOLUTIONS; SATISFACTORY SOLUTIONS; TRANSACTION LEVEL; WEB DATABASE;

EID: 50249084452     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-70567-3_24     Document Type: Conference Paper

References (18)

1. Berkhin, P.: Survey of Clustering Data Mining Techniques. Tech. rep., In Accrue Software, San Jose, CA (2002)
2. Bertino, E., Terzi, E., Kamra, A., Vakali, A.: Intrusion Detection in RBAC-administered Databases. In: Proceeding of 21st Computer Security Applications Conference, USA (2005)
3. Buehrer, T., Weide, B.W., Sivilotti, P.A.G.: Using Parse Tree Validation to Prevent SQL Injection Attacks. In: Proceedings of the 5th international workshop on Software Engineering and Middleware, Portugal (2005)
4. Chung, C., Gertz, M., Levitt, K.: Demids: A misuse detection system for database systems. In: Proceedings of IFIP TC11 WG11 Third Working Conference (1999)
5. Halfond, W., Orso, A.: Preventing SQL Injection Attacks Using AMNESIA. In: Proceedings of 28th International Conference on Software Engineering, China (2006)
6. Hu, Y., Panda, B.: A Data Mining Approach for Database Intrusion Detection. In: Proceedings of the ACM Symposium on Applied computing, Cyprus, pp. 711-716 (2004)
7. Low, W.L., Lee, S.Y., Teoh, P.: DIDAFIT: Detecting Intrusions in Databases Through Fingerprinting. In: Proceedings of the 4th International Conference on Enterprise Information Systems (2002)
8. Mirkovic, J., Dietrich, S., Dittrich, D., Reiher, P.: Internet Denial of Service: Attack and Defense Mechanisms. Prentice Hall, Englewood Cliffs (2005)
9. Raskutti, B., Leckie, C.: An Evaluation of Criteria for Measuring the Quality of Clusters. In: Proceedings of the Sixteenth International Joint Conference on Artificial Intelligence, Sweden (1999)
10. Roichman, A., Gudes, E.: Fine-grained Access Control to Web Databases. In: Proceeding of 12th SACMAT Symposium, France (2007)
11. Seo, J., Shneiderman, B.: Understanding Hierarchical Clustering Results by Interactive Exploration of Dendrograms. A Case Study with Genomic Microarray Data, Tech. rep. IEEE Computer Society Press, Los Alamitos (2002)
12. Srivastava, A., Reddy, S.R.: Intertransaction Data Dependency for Intrusion Detection in Database Systems. Part of Information and System Security course, School of Information Technology. IIT Kharagpur (2005)
13. Tran, S., Mohan, M.: Use trusted context in DB2 client applications (2006), http://www.ibm.com/developerworks/db2/library/techarticle/dm-0609mohan/ index.html
14. Woo, J., Lee, S., Zoltowski, C.: Database Auditing, http://www.cs.purdue. edu/homes/akamra/cs541/DB_auditing_survey_paper.pdf
15. Controlling Database Access, Oracle9i Database Concepts Release 2, http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96524/c23acces.htm
16. Online Book-Store application. The open source from, http://www.gotocode. com/apps.asp?app_id=3&
17. Acunetix, http://www.acunetix.com/
18. Connection Pool, http://en.wikipedia.org/wiki/Connection_pool