Intrusion Prevention in Multi-Tier Web Applications Using Double Guard

Web based services and applications have increased in both popularity and complexity over past few years. The flexibility of the web services computing model can expose corporate data and business processes to security risks. In this paper we present a different mapping algorithm for modeling container based architecture for preventing intrusions in web based applications using Double Guard. The aim is to built a well-correlated model that provides an effective mechanism to detect the different types of attacks and to create a causal mapping profile by taking both the web server and DB traffic into account. The proposed Double Guard system detects and prevents different attacks such as privilege escalation attack, SQL injection attack, future session attack, direct database attack and also other types of attacks.