Informatics Publishing Limited

B. Padhmavathi ¹, M. Jyotheeswar Arvind ¹, G. Ritikesh ¹

Affiliations
1 Dept. of Computer Science and Engineering, SRM University, IN

Abstract

This paper proposes a secure, platform independent tool to detect intrusions and respond to intrusion attacks. Current web application intrusion systems function predominantly on the network layer and are web platform dependent. Our tool detects intrusion attacks on the client side (application layer) of the application and thus prevents any damage to the application such as the loss of confidential data. A major requirement is to create a tool that can be easily integrated into any web application, is easy to use and doesn't slow down the application's performance. This tool implements an intrusion system by matching behavior patterns with an attack rule library. This implementation improves existing systems by reducing the number of false alarms generated by traditional systems eg:similar username matching. A statistical model is used to validate the detection and take the necessary responsive action only if it is validated by the test.

Keywords

Web Applications, Security, Intrusion Detection System, IDPS, Application Layer Security, Web Application Attacks.

Full Text

     

B. Padhmavathi ¹, P. Nirmal Kumar ², M. A. Dorai Rangaswamy ³

Affiliations
1 Department of Information Technology, Meenakshi College of Engineering, Chennai - 078, IN
2 Department of Electronics & Communication, College of Engineering, Guindy, Chennai – 025, IN
3 Department of Computer Science, AVIT, Vinayaka Mission University, Chennai, IN

Abstract

The growing possibilities of modern communications require a special means of confidential and intellectual property protection against unauthorized access and use. Cryptography provides important tools for the protection of information and they are used in many aspects of computer security. This paper makes use of encrypted secret sharing to increases the security level of hidden data and to provide Mutual Authentication of the users. The visual cryptography scheme is a perfect secure method that encrypts a secret image by breaking it into shadow images. A distinctive property of visual cryptography scheme is that one can visually, without computation, decode the secret by superimposing shadow images. The property of visual secret sharing in reversible style provides more security. This method not only can fast decode without causing pixel expansion but also increase the secret-hiding ratio. Random-Grid Algorithm is used to create secret shares without pixel expansion. This paper extends the capabilities of the Visual Cryptography as a mere secret sharing technique to a Novel Mutual Authentication provider. If one stacks two transparencies(shares) together straightforwardly, a secret image will appear. Stacking two transparencies after reversing one of the transparencies, another secret image will unveil. An attempt is made to provide two transparency three-way mutual authentication by using Visual cryptography in the reversible style.  

Keywords

Visual Cryptography in Reversible Style, Pixel Expansion, Random Grid Algorithm, Secret Transparencies, Share Stacking.

Full Text