You are here: silicon.com > Resources > White Papers > Security > Security Administration > Security Tools

Security Tools White Papers

A Stateful Intrusion Detection System for World-Wide Web Servers

Tags:
security tools

Overview Web servers are ubiquitous, remotely accessible, and often misconfigured. In addition, custom web-based applications may introduce vulnerabilities that are overlooked even by the most security-conscious server administrators. Consequently, web servers are a popular target for hackers. To mitigate the security exposure associated with web servers, intrusion detection systems are deployed to analyze and screen incoming requests. The goal is to perform early detection of malicious activity and possibly prevent more serious damage to the protected site. Even though intrusion detection is critical for the security of web servers, the intrusion detection systems available today only perform very simple analyses and are often vulnerable to simple evasion techniques.

Further White Paper Details
Publisher	University of California	File Format	PDF
Date Published	January 2008
Format	White Papers
Topics	Network Security, Security Tools, Intrusion Detection Systems

Did you find this white paper useful? 1 out of 2 users found this white paper useful

Take a holistic approach to business-driven security

Publisher:
IBM

Balancing Security Against Productivity

Publisher:
Novell

Security: New strides in preventing intrusions.

Publisher:
IBM

Novell Zenworks Endpoint Security Management: Total Control from a Single Console

Publisher:
Novell

Secure Desktop On-Demand Webcast

Publisher:
Novell

Security experts warn of massive hack attack

Peapod contacted most major anti-virus and intrusion detection vendors late last week to alert them to the dangers of Investigator 2.0, but by Monday only two had replied. Covert monitoring software on sale commercially in the US could give hackers...

Channel:
Security Strategy

Anti-virus vendors failing users, claims CA chief

To prevent this type of malware from attacking, companies should have both intrusion detection and firewalls as part of their security strategy, not just anti-virus software. He said: "I suspect Simon may be trying to push CA's firewall/intrusion...

Channel:
Security Strategy

2003 sees hackers rise to the task, says NAI chief

However, the problem now is that with detection it's all very well detecting something but, with the speed of attack being talked about with these Warhol worms, the damage is done "before you've even got out of bed an pulled your pants on...

Snoop fears sparked by security scans

Eschelbeck added that hackers who want to use a scanning tool for malicious activity are not likely to use a commercial scan service, such as that offered by Qualys, because of the audit trail that's created through the registration process.

Hacking fears spark power-plant security clampdown

No serious damage was done, they said, but the activity "heightened concerns" about future foul play. US power plants may have to tighten security against malicious hackers bent on wreaking havoc, according to a new federal law.

The dos and don'ts of VoIP security

Additional tools that will help networks in case of any attack are intrusion detection and prevention systems, which scan for rogue incoming packets, and straightforward antivirus software which can help prevent any known threats from disrupting...

Live Webcast: Telecoms 2.0 - Where is telecoms heading?

In this webcast, our panel of experts will review where we are with next generation telecoms in the UK, working through the concept of 'Telecoms 2.0': - Realising the potential of Next Generation Networks - why it isn't just about the technology? - What attributes should firms be looking for in their telco partner? - Is the relationship between telco provider and customer changing? - What things need to happen to make next generation services a reality? - You say you want the supplier to change. Do you want to change too? - What is Telecoms 2.0?

Publisher:
ZDNet UK

Telecom 2.0: Mind over matter

ntl:Telewest Business believes that the role of the telco is evolving. Gone are the days when it was enough to simply focus on circuits and minutes, customers now need a far higher degree of interaction and look for suppliers who will talk business solutions with them.

Publisher:
ntl:Telewest Business

IBM Information Server Change Data Capture

In today's fast-paced world, access to real-time data has never been more important. To be successful, organizations need to be able to report and analyze corporate data quickly and easily, regardless of what applications created the data, what platform they're running on, or what database they're stored in.

Publisher:
IBM

An examination of server consolidation: the trends that can drive efficiencies and help businesses gain a competitive edge

This white paper provides a starting point for organizations contemplating server consolidation. It includes an overview of server consolidation concepts and techniques and provides guidance on methodologies. It also looks at the potential cost savings associated with server consolidation and offers information on how organizations can sustain the advantage they have gained by consolidating their servers.

Publisher:
IBM

Also on silicon.com

Site Navigation:

Security Tools White Papers

A Stateful Intrusion Detection System for World-Wide Web Servers

Quick Sitemap Links:

About Us

Search

Blogs

Verticals

Advertising Features

CNET Networks in Europe

CNET Networks in the United States

CNET Networks in Asia Pacific