Design of Provider-Provisioned Website Protection Scheme against Malware Distribution
スポンサーリンク
概要
- 論文の詳細を見る
Vulnerabilities in web applications expose computer networks to security threats, and many websites are used by attackers as hopping sites to attack other websites and user terminals. These incidents prevent service providers from constructing secure networking environments. To protect websites from attacks exploiting vulnerabilities in web applications, service providers use web application firewalls (WAFs). WAFs filter accesses from attackers by using signatures, which are generated based on the exploit codes of previous attacks. However, WAFs cannot filter unknown attacks because the signatures cannot reflect new types of attacks. In service provider environments, the number of exploit codes has recently increased rapidly because of the spread of vulnerable web applications that have been developed through cloud computing. Thus, generating signatures for all exploit codes is difficult. To solve these problems, our proposed scheme detects and filters malware downloads that are sent from websites which have already received exploit codes. In addition, to collect information for detecting malware downloads, web honeypots, which automatically extract the communication records of exploit codes, are used. According to the results of experiments using a prototype, our scheme can filter attacks automatically so that service providers can provide secure and cost-effective network environments.
- 2010-05-01
著者
-
Yagi Takeshi
Ntt Information Sharing Platform Laboratories Ntt Corporation
-
TANIMOTO Naoto
NTT Information Sharing Platform Laboratories, NTT Corporation
-
HARIU Takeo
NTT Information Sharing Platform Laboratories, NTT Corporation
-
ITOH Mitsutaka
NTT Information Sharing Platform Laboratories, NTT Corporation
-
Hariu Takeo
Ntt Information Sharing Platform Laboratories Ntt Corporation
-
Tanimoto Naoto
Ntt Information Sharing Platform Laboratories Ntt Corporation
-
Itoh Mitsutaka
Ntt Information Sharing Platform Laboratories Ntt Corporation
関連論文
- Design of Provider-Provisioned Website Protection Scheme against Malware Distribution
- Safe and Secure Services Based on NGN
- Investigation and Evaluation of Attack Monitoring Methods Using Web Honeypots
- Design and Implementation of High Interaction Client Honeypot for Drive-by-Download Attacks
- Investigation and evaluation of attack monitoring methods using web honeypots (情報ネットワーク)
- Intelligent High-Interaction Web Honeypots Based on URL Conversion Scheme