HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK

SQL injection attacks toward web application increasingly prevalent. Testing to the web that will published is the one of preventive measures. However, this method sometimes ineffective because constrained by various things. Instrusion detection system (IDS) is able to help protect the website from...

Full description

Bibliographic Details
Main Author: Rajif Agung Yunmar
Format: Article
Language:English
Published: Informatics Department, Engineering Faculty 2018-07-01
Series:Jurnal Ilmiah Kursor: Menuju Solusi Teknologi Informasi
Subjects:
Online Access:https://kursorjournal.org/index.php/kursor/article/view/147
_version_ 1797743947021287424
author Rajif Agung Yunmar
author_facet Rajif Agung Yunmar
author_sort Rajif Agung Yunmar
collection DOAJ
description SQL injection attacks toward web application increasingly prevalent. Testing to the web that will published is the one of preventive measures. However, this method sometimes ineffective because constrained by various things. Instrusion detection system (IDS) is able to help protect the website from various attacks. This study proposed an IDS for web applications from SQL injection-based attacks. The IDS is based on hybrid architecture with a signature-based detection method, type of data to analyzed is network packet and error log. The fuzzy logic inference engine used to be drawn the conclusion based on analyzed data. Proposed hybrid IDS has good result on detecting the various type of SQL injection attack and significantly reduce or even remove the false positive and false negative.
first_indexed 2024-03-12T15:02:50Z
format Article
id doaj.art-cf9d9f713137467f959a22ab104d1feb
institution Directory Open Access Journal
issn 0216-0544
2301-6914
language English
last_indexed 2024-03-12T15:02:50Z
publishDate 2018-07-01
publisher Informatics Department, Engineering Faculty
record_format Article
series Jurnal Ilmiah Kursor: Menuju Solusi Teknologi Informasi
spelling doaj.art-cf9d9f713137467f959a22ab104d1feb2023-08-13T20:42:32ZengInformatics Department, Engineering FacultyJurnal Ilmiah Kursor: Menuju Solusi Teknologi Informasi0216-05442301-69142018-07-019310.28961/kursor.v9i3.147HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACKRajif Agung Yunmar0Program Studi Teknik Informatika, Institut Teknologi Sumatera SQL injection attacks toward web application increasingly prevalent. Testing to the web that will published is the one of preventive measures. However, this method sometimes ineffective because constrained by various things. Instrusion detection system (IDS) is able to help protect the website from various attacks. This study proposed an IDS for web applications from SQL injection-based attacks. The IDS is based on hybrid architecture with a signature-based detection method, type of data to analyzed is network packet and error log. The fuzzy logic inference engine used to be drawn the conclusion based on analyzed data. Proposed hybrid IDS has good result on detecting the various type of SQL injection attack and significantly reduce or even remove the false positive and false negative. https://kursorjournal.org/index.php/kursor/article/view/147hybrid intrusion detection sistemsignature-based IDSsql injectionfuzzy logic
spellingShingle Rajif Agung Yunmar
HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
Jurnal Ilmiah Kursor: Menuju Solusi Teknologi Informasi
hybrid intrusion detection sistem
signature-based IDS
sql injection
fuzzy logic
title HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
title_full HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
title_fullStr HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
title_full_unstemmed HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
title_short HYBRID INTRUSION DETECTION SYSTEM USING FUZZY LOGIC INFERENCE ENGINE FOR SQL INJECTION ATTACK
title_sort hybrid intrusion detection system using fuzzy logic inference engine for sql injection attack
topic hybrid intrusion detection sistem
signature-based IDS
sql injection
fuzzy logic
url https://kursorjournal.org/index.php/kursor/article/view/147
work_keys_str_mv AT rajifagungyunmar hybridintrusiondetectionsystemusingfuzzylogicinferenceengineforsqlinjectionattack