HTTP Request - SQL Query Mapping Scheme for Malicious SQL Query Detection in Multitier Web Applications

목차 (Table of Contents)

• 요약
• Abstract
• 1. 서론
• 2. 시스템 구성
• 3. 제안하는 request-query map 생성 기법
• 4. 성능평가
• 5. 결론
• References

참고문헌 (Reference)

1 "WordPress"

2 A. U. Patil, "WebGuard : Enhancing Intrusion Detection in Multitier Web Applications" 95 (95): 29-35, 2014

3 W3Techs, "Usage of content management systems for websites"

4 W. W. Eckerson, "Three tier client/server architecture : Achieving scalability, performance, and efficiency in client server applications" 3 (3): 46-50, 1995

5 SANS, "The top cyber security risks"

6 B. I. A. Barry, "Syntax, and semantics-based signature database for hybrid intrusion detection systems" 2 (2): 457-475, 2009

7 Y. Shin, "SQLUnitGen : Test case generation for SQL injection detection" Computer Science Dept., North Carolina State Univ. 2006

8 J. Newsome, "Polygraph : Automatically generating signatures for polymorphic worms" 226-241, 2005

9 "MySQL Proxy"

10 "MySQL"

11 "ModSecurity"

12 C. F. Tsai, "Intrusion detection by machine learning : A review" 36 (36): 11994-12000, 2009

13 "Form submission algorithm, HTML5, W3C recommendation"

14 Symantec, "Five common web application vulnerabilities"

15 Zhenkai Liang, "Fast and automated generation of attack signatures : A basis for building self-protecting servers" 213-222, 2005

16 N. S. Kulkarni, "Dual Protector : Intrusion detection scheme using double firewall in Multitier Architecture" 3 (3): 67-76, 2016

17 M. Le, "DoubleGuard : Detecting intrusions in multitier web applications" 9 (9): 512-525, 2012

18 M. Doroudian, "Database intrusion detection system for detecting malicious behaviors intransaction and inter-transaction levels" 809-814, 2014

19 M. T. Goodrich, "Data Structures and Algorithms in Java" John Wiley & Sons, Inc. 2005

20 CVE, "Common vulnerabilities and exposures"

21 H. A. Kim, "Autograph: Toward automated distributed worm signature detection" 2004

22 C. Sinclair, "An application of machine learning to network intrusion detection" 371-377, 1999

23 C. Anley, "Advanced SQL injection in SQL server applications" Next Generation Security Software, Ltd. 2002

24 "ANSI/ISO/IEC International Standard (IS) Database Language SQL-Part 2: Foundation (SQL/Foundation)"

25 G. Vigna, "A stateful intrusion detection system for world-wide web servers" 34-43, 2003

26 R. M. Pandurang, "A mappingbased model for preventing cross site scripting and SQL injection attacks on web application and its impact analysis" 414-418, 2015

27 G. Navarro, "A guided tour to approximate string matching" 33 (33): 31-88, 2011