A Novel Client Side Intrusion Detection and Response Framework

Abstract

This paper proposes a secure, platform independent tool to detect intrusions and respond to intrusion attacks. Current web application intrusion systems function predominantly on the network layer and are web platform dependent. Our tool detects intrusion attacks on the client side (application layer) of the application and thus prevents any damage to the application such as the loss of confidential data. A major requirement is to create a tool that can be easily integrated into any web application, is easy to use and doesn't slow down the application's performance. This tool implements an intrusion system by matching behavior patterns with an attack rule library. This implementation improves existing systems by reducing the number of false alarms generated by traditional systems eg: similar username matching. A statistical model is used to validate the detection and take the necessary responsive action only if it is validated by the test.