Encoding a Taxonomy of Web Attacks with Different-Length Vectors

Simple item page
dc.creatorAlvarez, Gonzalo
dc.creatorPetrovic, Slobodan
dc.date2002-10-29
dc.date.accessioned2026-07-07T03:18:57Z
dc.date.available2026-07-07T03:18:57Z
dc.descriptionWeb attacks, i.e. attacks exclusively using the HTTP protocol, are rapidly becoming one of the fundamental threats for information systems connected to the Internet. When the attacks suffered by web servers through the years are analyzed, it is observed that most of them are very similar, using a reduced number of attacking techniques. It is generally agreed that classification can help designers and programmers to better understand attacks and build more secure applications. As an effort in this direction, a new taxonomy of web attacks is proposed in this paper, with the objective of obtaining a practically useful reference framework for security applications. The use of the taxonomy is illustrated by means of multiplatform real world web attack examples. Along with this taxonomy, important features of each attack category are discussed. A suitable semantic-dependent web attack encoding scheme is defined that uses different-length vectors. Possible applications are described, which might benefit from this taxonomy and encoding scheme, such as intrusion detection systems and application firewalls.
dc.description22 pages, 1 figure, latex format
dc.identifierhttps://arxiv.org/abs/cs/0210026
dc.identifierhttp://arxiv.org/abs/cs/0210026
dc.identifierComputers and Security 22, 435-449, 2003
dc.identifier.urihttp://salesiana.dossiersoluciones.com/handle/123456789/31325
dc.subjectCryptography and Security
dc.subjectArtificial Intelligence
dc.subjectH.3.3;H.3.5
dc.titleEncoding a Taxonomy of Web Attacks with Different-Length Vectors
dc.typetext

Files

Collections

arXiv