Design and Implementation of Dynamic Web Security and Defense Mechanism Based on NDIS Intermediate Driver
Shuo Dai, Ye Du · 2009
To design and build a dynamic web security and defense mechanism, we use Device Driver Kit (DDK) Pass thru routine as the framework and adopt a method of capture based on Network Driver Interface Specification (NDIS) intermediate driver to realize non-bypassing monitoring of all packets; study, design and test detection rules against SQL injection attack and Cross-Site Scripting (CSS) attack; build a pervasive dynamic security system integrating Intrusion Detection System (IDS) and Firewall.Once an intrusion is detected, this Interaction Agent starts to work immediately followed by modification of firewall access control polices, thus complete security control is achieved.