A proactive framework for automatic detection of zero-day HTTP attacks on educational institutions. (February 2015)

• Record Type: Journal Article
• Authors: Kaur, Sanmeet; Singh, Maninder
• Is Part Of: Computer fraud & security. Number 2(2015)
• Page Start: 10
• Page End: 16
• Publication Date: 2015-02
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(15)30008-7
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : Education plays a vital role in economic development and improvements in human welfare. The education sector has changed a lot over the years, and Information and Communication Technology (ICT) plays an important role in the education sector. Almost every activity in universities and colleges, right from the procedure of counselling to admission and fee deposits, has been automated. Attendance records, quizzes, evaluations, marks and grade submission also involve use of ICT. Email, distance learning and other services that extend education beyond the campus are potentially significant. With the increased use of Information and Communication Technology (ICT) in educational institutes, security has become a big area of concern. Current signature-based intrusion detection provides only limited protection. Sanmeet Kaur and Maninder Singh of Thapar University, Patiala, India, propose a new hybrid automated signature generation system that is able to detect cross-site scripting, directory traversal, command injection and SQL injection attacks.