Detection of parameter manipulation using global sequence alignment

Abstract

Web Application Parameter contains identical structure and value. As a result, parameter features repetition of identical variable name and keyword. The characteristic of the keywords can be represented by being extracted from parameter. In order to measure the identity between two sequences, genome alignment which has been much studied in bioinformatics can be applied. We extract keyword sequences from the parameter of the web application considering the structural aspects of the application and apply the genome alignment method to measuring the identity between two parameter sequences in order to detect the parameter manipulation. An experiment shows that our method detects Parameter Manipulation and, moreover, previously unknown attacks as well as variations of known attacks. © 2006 IEEE.