Anomaly detection using negative security model in web application

2010 International Conference on Computer Information Systems and Industrial Management Applications, CISIM 2010

Volumn , Issue , 2010, Pages 481-486

  Auxilia, M ^a   Tamilselvan, D ^a  

^a Christ College of Engineering and Technology   (India)

Author keywords

Attacker; Cross site scripting; Logging; Rule set; Sql injection; Web application firewall; Web intrusion

Indexed keywords

ATTACKER; CROSS SITE SCRIPTING; LOGGING; RULE SET; SQL INJECTION; WEB APPLICATION FIREWALLS; WEB INTRUSION;

COMPUTER CRIME; INDUSTRIAL MANAGEMENT; INFORMATION SYSTEMS; JAVA PROGRAMMING LANGUAGE; PERSONAL COMPUTING; PROJECT MANAGEMENT; WORLD WIDE WEB;

HTTP;

EID: 78651230573     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CISIM.2010.5643461     Document Type: Conference Paper

References (11)

1. www.snort.org
2. M. Almgren, H. Debar, M. Dacier, "A lightweight tool for detecting web server attacks", In Proceedings of the ISOC Symposium on Network and Distributed Systems Security, 2000 .sytms, America,Wiley
3. Crothers,T., 2002, Implementing Intrusion Detection System, America,Willey.
4. Battachariya, Debasish Das, Utpal Sharma, "A Web Based Intrusion Detection Mechanism Based on Feature Based Data Clustering", International Advance Computing Conference,2009.
5. Jung-Ying Lai, Jain-shing Wu, shih-Jen Chen, Chia-Huan Wu, Chung-Huang Yang, "Designing a Taxonomy of Web Attacks", International Conference on Convergence and Hybrid Information Technology,2008.
6. C. Kruegel, G. Vigna, "Anomaly Detection of Web-based Attacks",Proceedings of the 10th ACM Conference on Computer and Communication Security (CCS '03),2003, pp. 251-261.
7. Qiang and Vasileios Megalooikonomou, A Clustering Algorithm for Intrusion Detection. DEnLab, Temple University.
8. Rebecca Bace, Peter Mell, NIST Special publication on Intrusion Detection Systesm, 16th August 2001.
9. Sanghyun cho , Sungdeok cha, SAD, Web Session Anomaly detection based on Parameter Estimation, Computer Security,pp312-319,2004
10. F. Valeur, D. Mutz, G. Vigna, "A Learning-Based Approach to the Detection of SQL Attacks", Proceedings of the Conference on Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA), Austria, 2005.
11. IIS W3C Extended Log Format,http://www.loganalyzer.net/log-analyzer/w3c- extended.html