Log visualization of intrusion and prevention reverse proxy server against web attacks

Mantoro, Teddy and Abdul Aziz, Normaziah and Meor Yusof, Nur Dalilah and Abu Talib, Nor Aishah (2013) Log visualization of intrusion and prevention reverse proxy server against web attacks. In: International Conference on Informatics and Creative Multimedia (ICICM), 2013, 4-6 September 2013, Kuala Lumpur, Malaysia.

PDF (Log visualization of intrusion and prevention reverse proxy server against web attacks) - Published Version Restricted to Repository staff only Download (242kB) | Request a copy

Abstract

SQL Injection Attack (SQLIA) has made to the top of the OWASP, Top 10 Web Application Security Risks in 2013 and in 2010. The explosive use of web application with very little emphasis lay on securing it make this attack becoming more popular. Various methods have been discussed and proposed as countermeasure to the attack. Unfortunately, most of them are seen to be not comprehensive enough to address any kind of issues an organization might have when it comes to hardening the web security such as technical and financial matter for instance. This study presents a way to prevent and detect intrusion through the deployment of reverse proxy with an intrusion and prevention mechanism built in against web attacks especially SQLIA. With the flexibility offered in server logging process, we obtain and analyse preferred data to visualize the type of attack based on logs information. Our graph visualization development monitors three web security aspects, i.e. the top traffic blocked attempted by IP address, number of regular expression rules violated and detect the rules of intrusion detection.

Item Type:	Conference or Workshop Item (Plenary Papers)
Additional Information:	5505/35416
Subjects:	T Technology > T Technology (General) > T10.5 Communication of technical information
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology > Department of Computer Science Kulliyyah of Information and Communication Technology > Department of Computer Science
Depositing User:	Dr. Normaziah Abdul Aziz
Date Deposited:	06 Feb 2014 15:56
Last Modified:	06 Jun 2016 03:25
URI:	http://irep.iium.edu.my/id/eprint/35416

Actions (login required)

View Item