IDS and IPS System in Multi-Tier Web Applications

In the age of information technology the facets of work and availability of everything on the internet services so the internet service and applications have become an inextricable part of day today life, enabling communication and the management of personal information from anywhere. To accommodate this increase in application and data complexity, web and its various services have moved to a multi-tiered system wherein the web server runs the application front-end logic and data is outsourced to a database or file server. In this paper, we present IDS–IPS SYSTEM, an IDS system that models the network behavior of user sessions across both the front-end web server and database present at the back end. By analyzing both web and related database requests, we are able to find out attacks that independent IDS would not be able to identify. Furthermore, we quantify the limitations of any multitier IDS in terms of training sessions and functionality coverage. We implemented IDS–IPS SYSTEM using an Apache web server with MySQL and lightweight virtualization. The real-world data was collected and processed also traffic over a 15-day period of system deployment in both dynamic and static web applications. Finally, using IDS– IPS SYSTEM, we were able to expose a wide range of attacks with 100% accuracy while maintaining 0% false positives for static web services and 0.6% false positives for dynamic web services. Keywords—IDS-IPS system, Multi-tier, Web based attack, SQL Injection, Vulnerable.