Hypervisor-based Security Architecture to Protect Web Applications

Dilshan Jayarathna; Udaya Tupakula; Vijay Varadharajan

Hypervisor-based Security Architecture to Protect Web Applications

Dilshan Jayarathna, Udaya Tupakula, Vijay Varadharajan

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Web based applications are very common nowadays where almost every software can be accessible through a web browser in one form or the other. This paper proposes techniques to detect different threats related to web applications by using a hypervisorbased security architecture. The proposed architecture leverages the hypervisor's visibility of the virtual machines' runtime state and traffic flows for securing the web application. The unique feature of the proposed architecture is that it is capable of doing fine granular detection of web application attacks, i.e. to the specific web page level, and protecting the application against zero-day attacks.

Original language	English
Title of host publication	Proceedings of the 13th Australasian Information Security Conference, AISC 2015
Place of Publication	Sydney, Australia
Publisher	Australian Computer Society Inc
Pages	15-24
Publication status	Published - 31 Dec 2015
Event	13th Australasian Information Security Conference, AISC 2015 - Sydney, Australia Duration: 27 Jan 2015 → 30 Jan 2015

Conference

Conference	13th Australasian Information Security Conference, AISC 2015
City	Sydney, Australia
Period	27/01/15 → 30/01/15

Access to Document

https://hdl.handle.net/1959.11/57201

Handle.net

Persistent link

Cite this

@inproceedings{7af3dad4724647cf8abcfa6d05e50f90,

title = "Hypervisor-based Security Architecture to Protect Web Applications",

abstract = "Web based applications are very common nowadays where almost every software can be accessible through a web browser in one form or the other. This paper proposes techniques to detect different threats related to web applications by using a hypervisorbased security architecture. The proposed architecture leverages the hypervisor's visibility of the virtual machines' runtime state and traffic flows for securing the web application. The unique feature of the proposed architecture is that it is capable of doing fine granular detection of web application attacks, i.e. to the specific web page level, and protecting the application against zero-day attacks.",

author = "Dilshan Jayarathna and Udaya Tupakula and Vijay Varadharajan",

year = "2015",

month = dec,

day = "31",

language = "English",

pages = "15--24",

booktitle = "Proceedings of the 13th Australasian Information Security Conference, AISC 2015",

publisher = "Australian Computer Society Inc",

note = "13th Australasian Information Security Conference, AISC 2015 ; Conference date: 27-01-2015 Through 30-01-2015",

}

Jayarathna, D, Tupakula, U & Varadharajan, V 2015, Hypervisor-based Security Architecture to Protect Web Applications. in Proceedings of the 13th Australasian Information Security Conference, AISC 2015. Australian Computer Society Inc, Sydney, Australia, pp. 15-24, 13th Australasian Information Security Conference, AISC 2015, Sydney, Australia, 27/01/15. <https://hdl.handle.net/1959.11/57201>

Hypervisor-based Security Architecture to Protect Web Applications. / Jayarathna, Dilshan; Tupakula, Udaya; Varadharajan, Vijay.
Proceedings of the 13th Australasian Information Security Conference, AISC 2015. Sydney, Australia: Australian Computer Society Inc, 2015. p. 15-24.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Hypervisor-based Security Architecture to Protect Web Applications

AU - Jayarathna, Dilshan

AU - Tupakula, Udaya

AU - Varadharajan, Vijay

PY - 2015/12/31

Y1 - 2015/12/31

N2 - Web based applications are very common nowadays where almost every software can be accessible through a web browser in one form or the other. This paper proposes techniques to detect different threats related to web applications by using a hypervisorbased security architecture. The proposed architecture leverages the hypervisor's visibility of the virtual machines' runtime state and traffic flows for securing the web application. The unique feature of the proposed architecture is that it is capable of doing fine granular detection of web application attacks, i.e. to the specific web page level, and protecting the application against zero-day attacks.

AB - Web based applications are very common nowadays where almost every software can be accessible through a web browser in one form or the other. This paper proposes techniques to detect different threats related to web applications by using a hypervisorbased security architecture. The proposed architecture leverages the hypervisor's visibility of the virtual machines' runtime state and traffic flows for securing the web application. The unique feature of the proposed architecture is that it is capable of doing fine granular detection of web application attacks, i.e. to the specific web page level, and protecting the application against zero-day attacks.

UR - https://crpit.scem.westernsydney.edu.au/abstracts/CRPITV161Jayarathna.html

UR - https://www.scopus.com/pages/publications/84941087094

M3 - Conference contribution

SP - 15

EP - 24

BT - Proceedings of the 13th Australasian Information Security Conference, AISC 2015

PB - Australian Computer Society Inc

CY - Sydney, Australia

T2 - 13th Australasian Information Security Conference, AISC 2015

Y2 - 27 January 2015 through 30 January 2015

ER -

Hypervisor-based Security Architecture to Protect Web Applications

Abstract

Conference

Access to Document

Handle.net

Fingerprint

Cite this