抄録
Web service demand is heterogeneous and it is expanding day by day. Malicious web attacks particularly at application layer, are also increasing significantly. It is estimated eighty percent (80%) malicious attacks are web application layer attacks such as Cross Site Scripting and SQL injection. Such attacks have affected financial organizations, government institutes, hospitals and enterprise companies and so on. It is required to detect such attacks instantly to maintain the safe operations. Existing Web Application Firewalls (WAF) aim at protection of web application attacks using Black and White list based approach Black list based WAFs operate at security operation center (SOC) to protect known attacks and it is easy to maintain same black list by other WAF nodes. However, white list independent signature from each Web service and it is generated by each web site policy. When the event of WAF fails, other WAF doesn't have same level of White list at that time. Black list is common type of signature and it can be keep the assurance by multiple WAF nodes or proxy node but White list is individual type of signature and can't maintain assurance by same policy of node. Therefore, to maintain high detection rate, dynamic adaptability of White list is required. It also requires online property and timeliness response. To solve these issues, an integrated Autonomous Decentralized Multi Layer Cache (ADMLC) system with Web Application Firewall is proposed. Evaluation shows that proposed architecture detection rate is much better than other traditional WAF based systems.
本文言語 | English |
---|---|
ホスト出版物のタイトル | Proceedings - 2011 10th International Symposium on Autonomous Decentralized Systems, ISADS 2011 |
ページ | 113-120 |
ページ数 | 8 |
DOI | |
出版ステータス | Published - 2011 |
外部発表 | はい |
イベント | 2011 10th International Symposium on Autonomous Decentralized Systems, ISADS 2011 - Tokyo and Hiroshima 継続期間: 2011 3月 23 → 2011 3月 27 |
Other
Other | 2011 10th International Symposium on Autonomous Decentralized Systems, ISADS 2011 |
---|---|
City | Tokyo and Hiroshima |
Period | 11/3/23 → 11/3/27 |
ASJC Scopus subject areas
- 人工知能
- 制御およびシステム工学