Web-Server Security Management system using the correlation analysis

kim,Sung-Rak

Journal of The Korea Society of Computer and Information

Abbr : JKSCI
2004, 9(4), pp.157-165
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science

kim,Sung-Rak ¹

¹오산대학

ABSTRACT

The paper suggests that web-server security management system will be able to detect the web service attack accurately and swiftly which is keeping on increasing at the moment and reduce the possibility of the false positive detection. This system gathers the results of many unit security modules at the real time and enhances the correctness of the detection through the correlation analysis procedure. The unit security module consists of Network based Intrusion Detection System module, File Integrity Check module, System Log Analysis module, and Web Log Analysis and there is the Correlation Analysis module that analyzes the correlations on the spot as a result of each unit security module processing. The suggested system provides the feasible framework of the range extension of correlation analysis and the addition of unit security module, as well as the correctness of the attack detection. In addition, the attack detection system module among the suggested systems has the faster detection time by means of restructuring Snort with multi thread base system. WSM will be improved through shortening the processing time of many unit security modules with heavy traffic.
KEYWORDS

NIDS, Snort, Intrusion Detection, Correlation
REFERENCES (7)

[journal] / 2003 / 2003 CSI/FBI COMPUTER CRIME AND SECURITY SURVEY

[journal] / 2002 / Introducing Multi Threaded Solution to Enhance the Efficiency of Snort / florida state univ

[journal] / 2002. / Enterprise Security Management ESMCentralizing Management of Your Security PolicySANS Info

[journal] / 2003 / Snort 2.0 Intrusion Detection" / Syngress Publishing s

[journal] / 2003 / 이상 침입탐지를 위한 베이지안 네트워크 기반의 정상행위 프로파일링 8(1)

[journal] / 2003 / OpenSource 를 활용한 S-ESM개발

[journal] / 2003. / 침입탐지 시스템의 성능향상을 위한 버퍼구조에 관한 연구 제 8권 (2)
KCI Citation (3)

KJC Korea
Journal Central

Statistics

Tools