SuStorID: A Multiple Classifier System for the Protection of Web Services

TitleSuStorID: A Multiple Classifier System for the Protection of Web Services
Publication TypeConference Paper
Year of Publication2012
AuthorsCorona, I, Tronci, R, Giacinto, G
Conference NameInternational Conference on Pattern Recognition (ICPR 2012)
Date Published11/09/2012
Conference LocationTsukuba International Congress Center, Tsukuba Science City, JAPAN
KeywordsIntrusion Detection, Multiple Classifier Systems, web security

The security of web services is nowadays one of the major concerns for Internet users. Web services may manage confidential information, monetary transactions, or even health-critical systems, such as those employed in public airports or hospitals. A key problem of web services is that they should work as expected even in the presence of malicious inputs. Unfortunately, with the increasing complexity of web services, this task becomes more and more challenging. In this paper we present SuStorID, a pattern recognition system which is able to model legitimate inputs towards web services, given a sample of web traffic. If anomalous inputs are detected, web services are protected according to a set of anomaly templates. Our experiments, performed on a production environment, highlight that our system can accurately detect web attacks and help security operators to protect their web services against known and unknown attacks.

Citation Key 1355
SuStorID-ICPR2012.pdf286.16 KB