Does Network Awareness Make Difference In Intrusion Detection of Web Attacks

Abstract

There is increasing number of attacks aiming web servers; mostly at the application level. This is due to the fact that web services emerging rapidly without security considerations and network level solutions allow their connections tunnel through. Intrusion detection systems (IDS) can be configured to detect web attacks. These systems produce too many logs as they don’t have enough information about the network they are installed on. A prototype implementation of network-aware IDS is developed and its benefits are introduced.