Toward Tracing the Source of Web Attacks Targeted at Web Applications

Abstract

Nowadays, with the popularity of the computer network, we are facing to complex web service functions and rampant web attacks. In this paper, a research on web attack traceback technology is present for accurately identifying attack source, timely blocking target IP, patching service vulnerability, storing and identifying attack vectors. Existing traceback systems need to change web-based business code or architecture of server route, however, our traceback system can analyze and manage web access behaviors via proxy server, require no agent, and simulate the traceback to source of web attack with the features such as high compatibility, low performance overhead and quick traceback.