一种基于响应式Web应用蜜罐的安全策略
An Innovative Security Strategy using Reactive Web Application Honeypot
摘要：
如今，Web应用程序已成为行业中最流行的应用程序，大多数组织的关键数据都是使用Web应用程序存储的。因此，Web应用程序成为各种网络攻击的更大目标，这些攻击包括数据库注入-SQL注入，PHP对象注入，模板注入，XML外部实体注入，未经消毒的输入攻击-跨站点脚本（XSS）等等。在众多的解决方案中，Web应用程序蜜罐是一种复杂而强大的保护机制。在本文中，我们提出了一个低交互，自适应，动态的Web应用程序蜜罐，通过HTTP事件模仿漏洞。蜜罐是用SNARE和TANNER构建的; SNARE创建攻击面并将请求发送给TANNER，TANNER评估它们并决定SNARE应该如何响应请求。TANNER是一个分析和分类工具，它分析和评估由SNARE提供的HTTP请求，并组成响应，它由模拟器提供支持，模拟器是用于模拟漏洞的引擎。
英文摘要：
Nowadays, web applications have become most prevalent in the industry, and the critical data of most organizations stored using web apps. Hence, web applications a much bigger target for diverse cyber-attacks, which varies from database injections-SQL injection, PHP object injection, template injection, XML external entity injection, unsanitized input attacks- Cross-Site Scripting(XSS), and many more. As mitigation for them, among many proposed solutions, web application honeypots are a much sophisticated and powerful protection mechanism. In this paper, we propose a low interaction, adaptive, and dynamic web application honeypot that imitates the vulnerabilities through HTTP events. The honeypot is built with SNARE and TANNER; SNARE creates the attack surface and sends the requests to TANNER, which evaluates them and decides how SNARE should respond to the requests. TANNER is an analysis and classification tool, which analyzes and evaluates HTTP requests served by SNARE and to compose the response, it is powered by emulators, which are engines used for the emulation of vulnerabilities.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
