Double Guard IDS System for E-Commerce Website

Abstract

DoubleGuard, an IDS system that models the network behaviour of user session across both front end web server and back end database. By monitoring both web and subsequent database requests, we are able to ferret out attacks that an independent IDS would not able to identify. We implemented DoubleGuard using an Apache web server with MySQL Query browser. These attacks have recently become more diverse, as attention has shifted from attacking the front end to exploiting vulnerabilities of web applications in order to corrupt the back-end database system. Intrusion Detection system currently examines network packets individually within both the webserver and database system.