Anzeige
Erschienen in:
2017 | OriginalPaper | Buchkapitel
A Struts2 Unknown Vulnerability Attack Detection and Backtracking Scheme Based on Multilayer Monitoring
verfasst von : Anqi Hu, Guojun Peng, Zhenhang Chen, Zejin Zhu
Erschienen in: Trusted Computing and Information Security
Verlag: Springer Singapore
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
For Struts2, attacks using unknown vulnerabilities are difficult to be detected and the details of the exploit are hard to be figured out. In this paper, we analyze the internal structure of Struts2 framework and the details of recent remote code execution vulnerabilities. Then we implement the monitoring mechanism on Struts2 application source layer, OGNL language layer and Java virtual machine system layer, and build a common detection framework and vulnerability detail backtracking scheme of Struts2 unknown vulnerability attack. Finally, through the experiments based on almost all (including nine “unknown” and three known) of the Struts2 remote code execution vulnerabilities since 2013, the result shows that the scheme can detect all the vulnerabilities and quickly locate the exploiting details, while the average performance loss is only 2.4%.