Web service injection attack detection

摘要

Injection attacks on web services can expose valuable information resources. To protect deployed web services against injection attacks, it is important to have defense techniques. Intrusion Detection Systems (IDS) are popular defense techniques to mitigate network layer attacks. This paper proposes an IDS for mitigating injection attacks on web services. We apply Genetic Algorithm (GA) as part of new attack signature generation for web services. The approach has been applied to a prototype web service and was found effective in generation of new attack signatures.