SS-IDS: Statistical Signature Based IDS

Abstract : Security of web servers has become a sensitive subject today. Prediction of normal and abnormal request is problematic due to large number of false alarms in many anomaly based Intrusion Detection Systems(IDS). SS-IDS derives automatical ly the parameter profiles from the analyzed data thereby generating the Statistical Signatures. Statistical Signatures are based on modeling of normal requests and their distribution value without explicit intervention. Several attributes are used to calculate the behavior of the legitimate request on the web server. SS-IDS is best suited for the newly instal led web servers which doesn't have large number of requests in the data set to train the IDS and can be used on top of currently used signature based IDS like SNORT. Experiments conducted on real data sets have shown high accuracy up to 99.98% for predicting valid request as valid and false positive rate ranges from 3.82-7.84%.
Type de document :
Communication dans un congrès
ICIW: International Conference on Internet and Web Applications and Services, May 2009, Venice, Italy. The Fourth International Conference on Internet and Web Applications and Services, ICIW 2009, May 24-28, 2009 - Venice/Mestre, Italy, pp.1-6, 2009, 〈http://www.iaria.org/conferences2009/ICIW09.html〉
Liste complète des métadonnées

Littérature citée [13 références]  Voir  Masquer  Télécharger

https://hal-lirmm.ccsd.cnrs.fr/lirmm-00365067
Contributeur : Pascal Poncelet <>
Soumis le : lundi 2 mars 2009 - 11:58:20
Dernière modification le : jeudi 24 mai 2018 - 15:59:23
Document(s) archivé(s) le : vendredi 12 octobre 2012 - 12:41:17

Fichier

ICIW.pdf
Fichiers éditeurs autorisés sur une archive ouverte

Identifiants

  • HAL Id : lirmm-00365067, version 1

Collections

Citation

Payas Gupta, Chedy Raïssi, Gérard Dray, Pascal Poncelet, Johan Brissaud. SS-IDS: Statistical Signature Based IDS. ICIW: International Conference on Internet and Web Applications and Services, May 2009, Venice, Italy. The Fourth International Conference on Internet and Web Applications and Services, ICIW 2009, May 24-28, 2009 - Venice/Mestre, Italy, pp.1-6, 2009, 〈http://www.iaria.org/conferences2009/ICIW09.html〉. 〈lirmm-00365067〉

Partager

Métriques

Consultations de la notice

268

Téléchargements de fichiers

375