Software Engineering

R. Manojkumar ¹, V. Cyril Raj ¹

Affiliations
1 Computer Science and Engineering, Dr MGR Educational and Research Institute, Maduravoyal, Chennai, TamilNadu, IN

Abstract

This paper proposes techniques to detect the vulnerabilities by performing scanning process for all website and web applications. The revealing process for vulnerabilities in ASP.NET websites/ applications is a complex process, where most of the code is anonymous and there are no citations to determine the purpose of the code. Due to the fact that ASP.NET which is part of .NET framework that separate the HTML code from the programming code in two files, one for (aspx) file and another for the programming code depending on the compiled language Visual Basic , C#, Java Script. Since the VB and C# are the most common languages in use around the world with ASP.NET files, we have adopted these two compiled languages in the construction of our proposed algorithm in addition to aspx files. Therefore, the scanning process inspects at least those three types of files aspx, VB and C#.

Keywords

Vulnerability, Web App, .NET Framework, Exploit, Assessment.

Full Text

     

B. Thanudas ¹, S. Sreelal ¹, B. S. Manoj ², V. Cyril Raj ³, Sumathy Eswaran ³

Affiliations
1 Vikram Sarabhai Space Centre, Thiruvananthapuram, Kerala, IN
2 Indian Institute of Space Science and Technology, Thiruvananthapuram, Kerala, IN
3 Dr.M.G.R. Educational and Research Institute University, Chennai, Tamil Nadu, IN

Abstract

Enterprise network security is becoming a very important and challenging task. Off-the-shelf tools and products are often found to be insufficient for large enterprises and government Research & Development (R&D) organizations. Many times, enterprise system administrators do not have the freedom to customize the network security systems of commercial type to the fullest needs of the enterprise. In addition, requirements of Government R&D establishments on providing the state-of-the-art information/cyber-security, are unable to be met by the commercial off-the-shelf enterprise network security suits. Such network security solutions like firewalls and intrusion detection systems (IDSs) provide only limited protection from the fast growing highly sophisticated cyber malwares (HSCMs). In this paper, we propose the agent-controller based security infrastructure for enterprise network for the use in Indian Space Research Organization (ISRO) and other government scientific R&D departments. The agent-controller infrastructure is tightly integrated with the organization’s network system in order to provide a highly customized solution.

Keywords

Enterprise Networks, Network Security, Highly Sophisticated Cyber Malwares, Agents, Controller, Intrusion Detection System, Firewall, Botnet, Anti-Virus.

Full Text