Using Static Program Analysis to Aid Intrusion Detection

Abstract. The Internet, and in particular the world-wide web, have become part of the everyday life of millions of people. With the growth of the web, the demand for on-line services rapidly increased. Today, whole industry branches rely on the Internet to do business. Unfortunately, the success of the web has recently been overshadowed by frequent reports of security breaches. Attackers have discovered that poorly written web applications are the Achilles heel of many organizations. The reason is that these applications are directly available through firewalls and are often developed by programmers who focus on features and tight schedules instead of security. In previous work, we developed an anomaly-based intrusion detection system that uses learning techniques to identify attacks against webbased applications. That system focuses on the analysis of the request parameters in client queries, but does not take into account any information about the protected web applications themselve...

• Type: Conference
• Year: 2006
• Where: DIMVA
• Authors: Manuel Egele, Martin Szydlowski, Engin Kirda, Christopher Krügel
• Keywords: DIMVA 2006, DIMVA 2007, Intrusion Detection, Request Parameters, Web Applications