HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
SQL injection attacks toward web application increasingly prevalent. Testing to the web that will published is the one of preventive measures. However, this method sometimes ineffective because constrained by various things. Instrusion detection system (IDS) is able to help protect the website from...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Informatics Department, Engineering Faculty
2018-07-01
|
| Series: | Jurnal Ilmiah Kursor: Menuju Solusi Teknologi Informasi |
| Subjects: | |
| Online Access: | https://kursorjournal.org/index.php/kursor/article/view/147 |
| Summary: | SQL injection attacks toward web application increasingly prevalent. Testing to the web that will published is the one of preventive measures. However, this method sometimes ineffective because constrained by various things. Instrusion detection system (IDS) is able to help protect the website from various attacks. This study proposed an IDS for web applications from SQL injection-based attacks. The IDS is based on hybrid architecture with a signature-based detection method, type of data to analyzed is network packet and error log. The fuzzy logic inference engine used to be drawn the conclusion based on analyzed data. Proposed hybrid IDS has good result on detecting the various type of SQL injection attack and significantly reduce or even remove the false positive and false negative.
|
|---|---|
| ISSN: | 0216-0544 2301-6914 |