Detecting attacks against data in web applications

RRABIDS (Ruby on Rails Anomaly Based Intrusion Detection System) is an application level intrusion detection system for applications implemented with the Ruby on Rails framework. It is aimed at detecting attacks against data in the context of web applications. This anomaly based IDS focuses on the m...

Full description

Saved in:
Bibliographic Details
Main Authors: Ludinard, R., Totel, E., Tronel, F., Nicomette, V., Kaaniche, M., Alata, E., Akrout, R., Bachy, Y.
Format: Conference Proceeding
Language:English
Subjects:
Context
Electronic mail
Indexes
Intrusion detection
Radiation detectors
Rails
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:RRABIDS (Ruby on Rails Anomaly Based Intrusion Detection System) is an application level intrusion detection system for applications implemented with the Ruby on Rails framework. It is aimed at detecting attacks against data in the context of web applications. This anomaly based IDS focuses on the modeling of the application profile in the absence of attacks (called normal profile) using invariants. These invariants are discovered during a learning phase. Then, they are used to instrument the web application at source code level, so that a deviation from the normal profile can be detected at run-time. This paper illustrates on simple examples how the approach detects well known categories of web attacks that involve a state violation of the application, such as SQL injections. Finally, an assessment phase is performed to evaluate the accuracy of the detection provided by the proposed approach.
ISSN:2151-4763
2151-478X
DOI:10.1109/CRISIS.2012.6378943