Refine your search
Collections
Co-Authors
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z All
Baykara, Muhammet
- A Survey on Potential Applications of Honeypot Technology in Intrusion Detection Systems
Abstract Views :265 |
PDF Views:0
Authors
Affiliations
1 Firat University, Software Engineering Department, 23119, Elazig, TR
1 Firat University, Software Engineering Department, 23119, Elazig, TR
Source
International Journal of Computer Networks and Applications, Vol 2, No 5 (2015), Pagination: 203-211Abstract
Information security in the sense of personal and institutional has become a top priority in digitalized modern world in parallel to the new technological developments. Many methods, tools and technologies are used to provide the information security of IT systems. These are considered, encryption, authentication, firewall, and intrusion detection and prevention systems. Moreover, honeypot systems are proposed as complementary structures. This paper presents the overall view of the publications in IDS, IPS and honeypot systems. Recently, honeypot systems are anymore used in connection with intrusion detection systems. So this paper describes possible implementation of honeypot technologies combined with IDS/IPS in a network. Studies in the literature have shown intrusion detection systems cannot find the 0-day vulnerabilities. The system provided by the honeypots and intrusion detection systems in the network, might detect new exploit and hacker attempt.Keywords
Information Security, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Honeypot, Network Security.Full Text
- A Novel Hybrid Approach for Detection of Web-Based Attacks in Intrusion Detection Systems
Abstract Views :285 |
PDF Views:1
Authors
Affiliations
1 Department of Software Engineering, Firat University, Elazig, 23119, TR
1 Department of Software Engineering, Firat University, Elazig, 23119, TR
Source
International Journal of Computer Networks and Applications, Vol 4, No 2 (2017), Pagination: 62-76Abstract
Importance of information security systems is increasing in parallel with the rapid developments in information technology. The development of new technologies brings new security weaknesses in corporate and personal meaning can lead to unavoidable losses. For this reason, many researches have been performed in order to ensure the security of information systems. In today's world, the concept of information has been moved to the digital size from conventional size. Protection of the data stored in the digital archive and is easily accessibility at any time have become a quite important phenomenon. In this concept, intrusion detection and prevention systems as security tools are widely used today. In this paper, a hybrid real time intrusion and prevention system approach has been proposed for web applications security. The proposed system uses rule-based misuse detection and anomaly detection as intrusion detection method and uses network packets as data source. The system is real-timed with accordance to data process time, centralized with accordance to architecture, and server-based with accordance to system it protects. The developed system has been tested on the current web attacks determined by OWASP (The Open Web Application Security Project) and provides a very high success rate.Keywords
Web Attacks, Intrusion Detection And Prevention Systems, Information Security, Network Analysis.Full Text
References
- Baykara, M., Das, R., Karadogan, I., "Bilgi Guvenligi Sistemlerinde Kullanilan Araclarin Incelenmesi", 1st International Symposium on Digital Forensics and Security, pp. 231-239, 20-22 May. 2013, Firat University, Elazig-Turkey.
- Razzaq, A., Hur, A., Masood, M., Latif, K., Ahmad, H.F., Takahashi, H., "Foundation of Semantic Rule Engine to Protect Web Application Attacks," 10th International Symposium on Autonomous Decentralized Systems (ISADS), pp. 95-102, 23-27 March 2011.
- Lounis, O., Bouhouita Guermeche, S.E., Saoudi, L., Benaicha, S.E., "A new algorithm for detecting SQL injection attack in Web application," Science and Information Conference (SAI), pp. 589-594, 27-29 Aug. 2014.
- Liang Guangmin, "Modeling Unknown Web Attacks in Network Anomaly Detection," Third International Conference on Convergence and Hybrid Information Technology, ICCIT '08, vol.2, no., pp. 112-116, 11-13 Nov. 2008.
- Ludinard, R., Totel, E., Tronel, F., Nicomette, V., Kaaniche, M., Alata, E., Akrout, R., Bachy, Y., "Detecting attacks against data in web applications", 7th International Conference on Risk and Security of Internet and Systems (CRiSIS), pp. 1-8, 10-12 Oct. 2012.
- Zolotukhin, M., Hamalainen, T., Kokkonen, T., Siltanen, J., "Analysis of HTTP Requests for Anomaly Detection of Web Attacks," 12th International Conference on Dependable, Autonomic and Secure Computing (DASC), IEEE, pp. 406,411, 24-27 Aug. 2014.
- Takci, H., Akyuz, T., & Sogukpinar, I., "Web Ataklari Icin Metin Tabanli Anormallik Tespiti (Wamtat)" Journal of The Faculty of Engineering and Architecture of Gazi University, Vol: 22, No: 2, pp. 247-253, 2007.
- Sagiroglu, S., Guven, E.N., Yavanoglu, U., "Zeki Saldiri Tespit Sistemi Tasarimi ve Gercekleutirilmesi", Journal of The Faculty of Engineering and Architecture of Gazi University, Vol:26, No:2, pp. 325-340, 2011.
- Sancak, S., "Saldiri Tespit Sistemi Tekniklerinin Karsilastirilmasi", Master Thesis, Gebze Technical University, 2008.
- Baykara, M., "Design and Implementation of Intrusion Detection and Prevention Approaches for Information Systems", Ph.D Thesis, Fırat University, Graduate School of Natural and Applied Sciences, Department of Software Engineering 2016.
- Demirol D., Das R., Baykara M., "SQL Enjeksiyon Saldiri Uygulamasi ve Guvenlik Onerileri", 1st International Symposium on Digital Forensics and Security, 20-22 Mayis 2013, Firat University, Elazig.
- Internet: Ar, I., "Nufuz Tespit Sistemleri", http://anibal.gyte.edu.tr/hebe/AblDrive/59669005/w/Storage/104_2010_2_673_59669005/Homeworks/lktan-ar-nufuz-tespit-sistemleri.pdf, (Access Date: 10.03.2017).
- Vural, Y., Sagiroglu, S, "Kurumsal Bilgi Guvenligi ve Standartlari uzerine bir Inceleme", Journal of The Faculty of Engineering and Architecture of Gazi University, Vol: 23, No: 2, pp. 507-522, June 2008.
- Ozhan, E., Paket ve Port Analizi Ile Ag Saldiri Tespit Sistemleri, Master Thesis, Trakya University, Graduate School of Natural and Applied Sciences, 2006.
- Sazli, H., M., Tanrikulu, H., "Saldiri Tespit Sistemlerinde Yapay Sinir Aglarinin Kullanilmasi", XII. Turkiye'de Internet Konferansi, 8-10 Kasim, Ankara, 2007.
- Huang at all, "A Multi-Agent-Based Distributed Intrusion Detection System", 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE), 2010.
- Canbek, G., Sagiroglu, S., "Bilgisayar Sistemlerine Yapilan Saldirilar ve Turleri: Bir Inceleme", Erciyes University Journal of Institue of Science and Technology, 23(1-2), pp. 1-12, 2007.
- Patcha, A., Park, J.M., "An overview of anomaly detection techniques: Existing solutions and latest technological trends", Computer Networks, 51(12): pp. 3448-3470, 2007.
- Anderson, J.P., "Computer Security Threat Monitoring and Surveillance", Technical Report, James P. Anderson Co., Fort Washington, PA. 15 April 1980.
- Aris, A., Oktug S. F. and Yalcin, S. B.O., "Nesnelerin Interneti Guvenligi: Servis Engelleme Saldirilari Internet-of-Things Security: Denial of Service Attacks", 2015.
- Ogretmen, F. D., Aydin, M. A. and Ahmet Sertbas., "Saldiri Tespit Sisteminin Bulut Bilisimde Kullanimi ve Etkileri", ISC-Turkey, 30-31 October 2015.
- Yavuz, G., Bektas, O., Soysal, M., and Yigit, S., "Sanal Ipv6 Balkupu Agi Altyapisi: Kovan", National IPv6 Conference 2011.
- Lobato, A. G. P., da Rocha Figueiredo, U., & Duarte, O. C. M., "An Architecture for Intrusion Prevention using Software Defined Networks.", Universidade Federal do Rio de Janeiro-GTA/COPPE-Rio de Janeiro, Brazil.
- Raza, S., Wallgren, L., Voight, T., "SVELTE: Real-time intrusion detection in the Internet of Things. Ad hoc networks", 11.8: pp. 2661-2674, 2013.
- A. A. Gendreau and M. Moorman, "Survey of Intrusion Detection Systems towards an End to End Secure Internet of Things," IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud), Vienna, pp. 84-90, 2016.