Using Bayesian Classifiers to Detect Fuzzing

 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Complex Event Processing RSS News Using Bayesian Classifiers to Detect Fuzzing
# 1  
Old 11-04-2007
Using Bayesian Classifiers to Detect Fuzzing

Tim Bass
Sun, 04 Nov 2007 10:34:48 +0000
Fuzzing, from a security*perspective, is when an automated*program searches*for IT*vulnerabilities by sending random input to an application.** Fuzzers are*sometimes referred to as fault injector and*are used by hackers to*find buffer overflows and other*application flaws*such as SQL injection, XSS, and format string vulnerabilities.
In the past few years fuzzing is being increasing used by criminals to search for on-line vulnerabilities that can be exploited; and for this reason, fuzzing is a serious threat to ecommerce and other online business applications.
How would an organization detect fuzzing?
Bayesian classifiers are used to detect spam, denial of service attacks, fraud, and other complex data sets; so it makes perfect sense to use Bayesian techniques to detect fuzzing.* However, I have searched the network have not yet found an implementation of a Bayesian classifier specifically*to detect fuzzing in*real-time.*
If anyone knows of a (Java-based) Bayesian classifer that would be a good starting point for the real-time detection of fuzzing, please let me know.* Thanks!



Source...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Detect OS

whats the equivalent of detect OS in perl with an if then ? platform='uname' if ]; then alias ls='ls --color=auto' elif ]; then alias ls='ls -G' fi In perl I see perl -Mstrict -MEnglish -E 'say $OSNAME' or print "$^O" Please use CODE tags as required by... (1 Reply)
Discussion started by: nixguynj
1 Replies

2. Shell Programming and Scripting

Detect changes to crontab

Dear All, My server is running crontabs of 4 different users. I want to develop a script that whenever a particular change occurs in a crontab , it is detected and the particular change is noted into a file. Kindly let me know of suggestions on how it can be achieved. My algo would be: ... (1 Reply)
Discussion started by: Junaid Subhani
1 Replies

3. Shell Programming and Scripting

detect F5 is pressed

Hello friends, I want to write a shell script in bash shell . Working for the script is to detect any key pressed and disply on screen as "you have pressed: " For example if user pressed F5 then a messaged has to be displayed as "you have pressed F5. Thank you. (4 Replies)
Discussion started by: pradeepreddy
4 Replies

4. Cybersecurity

Bayesian IDS

Hi there, I am working on Anomaly based Network IDS... Statistical based technique is simple but not quite effective in real scenario... I understand Bayesian classifier/Network is more effective in the context of anomaly detection, but i have very little idea about Bayesian approach for... (0 Replies)
Discussion started by: Dinakara
0 Replies

5. Shell Programming and Scripting

How to detect process

Dear Sir, Now I use oracle database on AIX server and found some user use iligal program such as development tool logon to my database. I want to detect the process of illegal program and kill it. Could you please suggest me to make detect process. Thank you very much Pkanonwe. (2 Replies)
Discussion started by: pkanonwe
2 Replies
Login or Register to Ask a Question
Encode::Detect::Detector(3pm)				User Contributed Perl Documentation			     Encode::Detect::Detector(3pm)

NAME
Encode::Detect::Detector - Detects the encoding of data SYNOPSIS
use Encode::Detect::Detector; my $charset = detect($octets); my $d = new Encode::Detect::Detector; $d->handle($octets); $d->handle($more_octets); $d->end; my $charset = $d->getresult; DESCRIPTION
This module provides an interface to Mozilla's universal charset detector, which detects the charset used to encode data. METHODS
$charset = Encode::Detect::Detector->detect($octets) Detect the charset used to encode the data in $octets and return the charset's name. Returns undef if the charset cannot be determined with sufficient confidence. $d = Encode::Detect::Detector->new() Creates a new "Encode::Detect::Detector" object and returns it. $d->handle($octets) Provides an additional chunk of data to be examined by the detector. May be called multiple times. Returns zero on success, nonzero if a memory allocation failed. $d->eof Informs the detector that there is no more data to be examined. In many cases, this is necessary in order for the detector to make a decision on the charset. $d->reset Resets the detector to its initial state. $d->getresult Returns the name of the detected charset or "undef" if no charset has (yet) been decided upon. May be called at any time. SEE ALSO
Encode::Detect AUTHOR
John Gardiner Myers <jgmyers@proofpoint.com> SUPPORT
For help and thank you notes, e-mail the author directly. To report a bug, submit a patch, or add to the wishlist please visit the CPAN bug manager at: http://rt.cpan.org perl v5.14.2 2011-11-15 Encode::Detect::Detector(3pm)