Thiago M. Rosa,  Altair O. Santin,  Andreia Malucelli. 

The underlying technologies used by web services bring well-known vulnerabilities from other domains to this new environment. Anomaly-based intrusion detection approaches produce high false positive rates, while signature-based intrusion detection approaches do not detect attack variations. This paper presents a novel hybrid attack detection engine that brings together the main advantages of these classical detection approaches. An ontology is applied as a strategy-based knowledge-base to assist mitigatingXML injection attacks, while maintaining low false positive detection rates.

http://www.lbd.dcc.ufmg.br/colecoes/sbseg/2011/0012.pdf

Processando consulta.