Paper Abstract and Keywords |
Presentation |
2020-03-03 09:30
Preliminary Study of WAF Signature Generation by Utilizing Real-time Information on the Web Masahito Kumazaki, Hirokazu Hasegawa, Yukiko Yamaguchi, Hajime Shimada (Nagoya Univ.) ICSS2019-84 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
Zero-day attacks and attacks based on publicly disclosed vulnerability information are one of the major threats in network security. In order to cope with such attacks, it is important to collect related information and deal with it as soon as possible. Therefore, we propose a system that collects vulnerability information related to Web applications from real-time information on the Web and generates WAF(Web Application Firewall) signatures from those information. In this paper, as an initial study, we extract vulnerability information containing the specified keyword from NVD(National Vulnerability Database) data feed, and generate WAF signatures automatically from extracted information. In addition, we discussed and examined WAF signatures generation from Tweet of the Twitter, which is a famous real-time information source on the Web. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
Web Application Firewall(WAF) / Zero-day Attack / Vulnerability Information / Real-time Information / / / / |
Reference Info. |
IEICE Tech. Rep., vol. 119, no. 437, ICSS2019-84, pp. 97-102, March 2020. |
Paper # |
ICSS2019-84 |
Date of Issue |
2020-02-24 (ICSS) |
ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
ICSS2019-84 |
Conference Information |
Committee |
ICSS IPSJ-SPT |
Conference Date |
2020-03-02 - 2020-03-03 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Okinawa-Ken-Seinen-Kaikan |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
Security, Trust, etc. |
Paper Information |
Registration To |
ICSS |
Conference Code |
2020-03-ICSS-SPT |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
Preliminary Study of WAF Signature Generation by Utilizing Real-time Information on the Web |
Sub Title (in English) |
|
Keyword(1) |
Web Application Firewall(WAF) |
Keyword(2) |
Zero-day Attack |
Keyword(3) |
Vulnerability Information |
Keyword(4) |
Real-time Information |
Keyword(5) |
|
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Masahito Kumazaki |
1st Author's Affiliation |
Nagoya Univercity (Nagoya Univ.) |
2nd Author's Name |
Hirokazu Hasegawa |
2nd Author's Affiliation |
Nagoya Univercity (Nagoya Univ.) |
3rd Author's Name |
Yukiko Yamaguchi |
3rd Author's Affiliation |
Nagoya Univercity (Nagoya Univ.) |
4th Author's Name |
Hajime Shimada |
4th Author's Affiliation |
Nagoya Univercity (Nagoya Univ.) |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2020-03-03 09:30:00 |
Presentation Time |
20 minutes |
Registration for |
ICSS |
Paper # |
ICSS2019-84 |
Volume (vol) |
vol.119 |
Number (no) |
no.437 |
Page |
pp.97-102 |
#Pages |
6 |
Date of Issue |
2020-02-24 (ICSS) |
|