RESEARCH ON WEB SERVER ATTACKING-BASED INTRUSION DETECTION

To overcome the limitation of existing signature-based intrusion detection system in detecting web server attacks, we detect attacks of Web server based on the root causes and the locations where those attacks occur, therefore propose Web IDS model in the paper. The resource monitoring of Web server is the core of this model. It is realized by coordination and cooperation of many resource monitor agents. We Propose an Algorithm of file access analysis and an Algorithm of port information extracting based on protocol analysis for defending of Web Server attack and improving detecting efficiency.