SuStorID: A multiple classifier system for the protection of web services

CORONA, IGINO;TRONCI, ROBERTO;GIACINTO, GIORGIO
2012

Abstract

The security of web services is nowadays one of the major concerns for Internet users. Web services may manage confidential information, monetary transactions, or even health-critical systems, such as those employed in public airports or hospitals. A key problem of web services is that they should work as expected even in the presence of malicious inputs. Unfortunately, with the increasing complexity of web services, this task becomes more and more challenging. In this paper we present SuStorID, a multiple classifier system which is able to model legitimate inputs towards web services, given a sample of web traffic. If anomalous inputs are detected, web services are protected according to a set of anomaly templates. Our experiments, performed on a production environment, highlight that our system can accurately detect web attacks and help security operators to protect their web services against known and unknown attacks.
2012 21ST INTERNATIONAL CONFERENCE ON PATTERN RECOGNITION (ICPR 2012)
978-4-9906441-1-6
IEEE
2375
2378
4
http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6460643&isnumber=6460043
21st International Conference on Pattern Recognition (ICPR 2012)
Esperti anonimi
11-15 Novembre 2012
Tsukuba, Japan
internazionale
4 Contributo in Atti di Convegno (Proceeding)::4.1 Contributo in Atti di convegno
Corona, Igino; Tronci, Roberto; Giacinto, Giorgio
273
3
4.1 Contributo in Atti di convegno
none
info:eu-repo/semantics/conferenceObject
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Questionario e social

Condividi su:
Impostazioni cookie