Yıl 2007,
Cilt: 22 Sayı: 2, 0 - , 15.02.2013
Öz
Bugünlerde birçok web sitesi kullanıcılarla etkileşim içerisinde olup bu etkileşimde kullanıcılar isteklerini URLiçinde gömülü olarak web sunucuya iletirler. URL içerisine giriş verisi olarak zararlı kodun gömülmesi atakyöntemlerinden biridir ve bu tip atakların tespiti için giriş verisi analiz edilebilir. Bu çalışmada, atak tespiti içinmetin tabanlı bir anormallik tespiti yöntemi önerilmektedir. Önerilen yöntem kullanıcı girişlerinin analizindegiriş verisinin metinsel özelliklerini kullanır. Gerçeklemesi yapılarak deneysel sonuçları bu makalede verilenyöntem web tabanlı atakların anormallik tabanlı tespitinde yeni bir yaklaşımdır.
Anahtar Kelimeler
Kaynakça
- Foltz, C. B., Cyberterrorism, Computer Crime,
- and Reality, Information
- Management&Computer Security, vol 12, no
- , 2004, p.154-166.
- Security Tracker. Vulnerability statistics April
- -march 2002.
- http://www.securitytrcker.com/learn/statistics.html, April
- -
- Rubin A. D. and Geer Jr. D. E., "A Survey of
- Web Security", IEEE Computer, Vol. 31, No. 9,
- September 1998, pp. 34-41.
- Gordon, L.A., Loeb, M.P., Lucyshyn W. and
- Richardson R., 2004 CSI/FBI Computer Crime and
- Security Survey. 2004, available at http://gocsi.com
- Kruegel C., Vigna G., (2003), Anomaly
- Detection of Web-Based Attacks, Proceedings of
- the 10th ACM Conference on Computer and
- Communication Security (CCS '03) ACM Press
- Washington, DC. pp. 251-261.
- Cho S., Cha S., SAD:Web Session Anomaly
- Detection Based on Parameter Estimation,
- Computers & Security, Volume 23, Issue 4,
- June 2004, pp. 312-319
- Vigna G. , Valeur F., and Kemmerer
- R.A., Designing and Implementing A Family of
- Intrusion Detection Systems, Proceedings of the
- European Conference on Software
- Engineering (ESEC) Helsinki, Finland
- September 2003.
- Alvarez G., Petrovic S., A new taxonomy web
- attacks suitable for efficient encoding,
- Computers & Security, vol. 22, 2003, pp. 435-
- -
- Kruegel C., Toth, T. and Kirda E.., Service Specific
- Anomaly Detection for Network Intrusion Detection.
- Proceedings of Symposium on Applied
- Computing(SAC). ACM Scientific Press, March
- -
- Vigna G. , Robertson W. , Kher V. , and Kemmerer
- R.A. , A Stateful Intrusion Detection System for
- World-Wide Web Servers, Proceedings of the Annual
- Computer Security Applications Conference
- (ACSAC) 34-43 Las Vegas, NV December 2003
- Takci H., Sogukpinar I., Centroid-Based
- Language Identification Using Letter Feature Set,
- Lecture Notes in Computer Science, Vol.
- /2004, February 2004, pp. 635-645.
Yıl 2007,
Cilt: 22 Sayı: 2, 0 - , 15.02.2013
Öz
Kaynakça
- Foltz, C. B., Cyberterrorism, Computer Crime,
- and Reality, Information
- Management&Computer Security, vol 12, no
- , 2004, p.154-166.
- Security Tracker. Vulnerability statistics April
- -march 2002.
- http://www.securitytrcker.com/learn/statistics.html, April
- -
- Rubin A. D. and Geer Jr. D. E., "A Survey of
- Web Security", IEEE Computer, Vol. 31, No. 9,
- September 1998, pp. 34-41.
- Gordon, L.A., Loeb, M.P., Lucyshyn W. and
- Richardson R., 2004 CSI/FBI Computer Crime and
- Security Survey. 2004, available at http://gocsi.com
- Kruegel C., Vigna G., (2003), Anomaly
- Detection of Web-Based Attacks, Proceedings of
- the 10th ACM Conference on Computer and
- Communication Security (CCS '03) ACM Press
- Washington, DC. pp. 251-261.
- Cho S., Cha S., SAD:Web Session Anomaly
- Detection Based on Parameter Estimation,
- Computers & Security, Volume 23, Issue 4,
- June 2004, pp. 312-319
- Vigna G. , Valeur F., and Kemmerer
- R.A., Designing and Implementing A Family of
- Intrusion Detection Systems, Proceedings of the
- European Conference on Software
- Engineering (ESEC) Helsinki, Finland
- September 2003.
- Alvarez G., Petrovic S., A new taxonomy web
- attacks suitable for efficient encoding,
- Computers & Security, vol. 22, 2003, pp. 435-
- -
- Kruegel C., Toth, T. and Kirda E.., Service Specific
- Anomaly Detection for Network Intrusion Detection.
- Proceedings of Symposium on Applied
- Computing(SAC). ACM Scientific Press, March
- -
- Vigna G. , Robertson W. , Kher V. , and Kemmerer
- R.A. , A Stateful Intrusion Detection System for
- World-Wide Web Servers, Proceedings of the Annual
- Computer Security Applications Conference
- (ACSAC) 34-43 Las Vegas, NV December 2003
- Takci H., Sogukpinar I., Centroid-Based
- Language Identification Using Letter Feature Set,
- Lecture Notes in Computer Science, Vol.
- /2004, February 2004, pp. 635-645.
Toplam 47 adet kaynakça vardır.
Ayrıntılar
| Birincil Dil | Türkçe |
|---|---|
| Bölüm | Makaleler |
| Yazarlar | |
| Yayımlanma Tarihi | 15 Şubat 2013 |
| Gönderilme Tarihi | 15 Şubat 2013 |
| Yayımlandığı Sayı | Yıl 2007 Cilt: 22 Sayı: 2 |