欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
针对Web应用攻击方式繁多、传统Web应用防火墙黑名单规则库过于复杂的问题，提出一种新的web应用防火墙的自学习模型，采用先收集、整理和归纳网页参数特征，再与用户提交数据进行规则匹配的方法，实现对Web应用的安全防护．自学习模型将web页面参数分为类型固定参数、枚举参数和用户输入参数三类，由初始学习模块和持续学习模块组成，前者由合理样本数据建立初始规则库，后者根据用户近一段时间的输入数据持续学习网页特点，扩充用户合法行为模式，以适应用户需求变化和Web应用更新．本模型采用异常流量统计和数据包相似性分析的综合方法应对针对学习过程的攻击，进行有选择性的学习．实验结果表明此自学习模型具有良好的安全防护能力和学习能力．
英文摘要：
This paper presents a new model of learning WAF （ Web Application Firewall ） to solve the problem of various attacks and the complexity of black list. By collecting, summarizing and inducting the characteristics of web parameters, and then matching the user input with it, the model could ensure the security of Web applications. This model classifies the Web page parameters as fixed- type parameter, enumeration parameter and user-input parameter, and has two modules, initial learning module and continuous learn- ing module. The first one creates initial rule base according to the reasonable user input sample, then the latter one could continuously learn the characteristics of Web page based on the recently user input data, in order to adapt to application updates and the change of user needs. The model also introduces a comprehensive method of exceptional data flow statistic and the analysis of data similarity to learn selectively to resist the attacks which target the learning process. Experimental results has indicated that the new learning WAF has a great ability of protecting the security and learning.
同期刊论文项目
同项目期刊论文
Practical quantum private query of blocks based on unbalanced-state Bennett-Brassard-1984 quantum-ke
An efficient server bandwidth costs decreased mechanism for asynchronous streaming in cloud-assisted
Application semi-group property of enhanced Chebyshev polynomials to anonymous authentication protoc
Cryptanalysis and improvement of a multi-user quantum communication network using χ-type entangled s
Self-organizing Energy-saving Management Mechanism based on Pilot Power Adjustment in Cellular Netwo
An anonymous user authentication with key agreement scheme without pairings for multi-server archite
SBDP: Bandwidth Prediction Mechanism towards Server Demands in P2P-VoD System. Peer-to-Peer Networki
An efficient server bandwidth costs decreased mechanism towards mobile devices in cloud-assisted P2P
Certificateless Public Key Encryption Scheme with Hybrid Problems and Its Application to Internet of
An Anonymous User Authentication with Key Agreement Scheme without Pairings for Multiserver Architec
A Strongly Secure Pairing-free Certificateless Authenticated Key Agreement Protocol for Low-Power De
Energy Efficient Source Location Privacy Protecting Scheme in Wireless Sensor Networks Using Ant Col
A Novel Authentication Scheme Using Self-certified Public Keys for Telecare Medical Information Syst
An improved authentication with key agreement scheme on elliptic curve cryptosystem for global mobil
An Efficient and Secure Certificateless Authentication Protocol for Healthcare System on Wireless Me
期刊信息
位置：