Refereed paper: A new taxonomy of Web attacks suitable for efficient encoding

摘要: Web attacks, i.e. attacks exclusively using the HTTP/HTTPS protocol, are rapidly becoming one of fundamental threats for information systems connected to Internet. When suffered by servers through years analyzed, it is observed that most them very similar, a reduced number attacking techniques. It generally agreed classification can help designers and programmers better understand build more secure applications. As an effort in this direction, new taxonomy proposed paper, with objective obtaining useful reference framework security The use illustrated means multiplatform real world attack examples. Along taxonomy, important features each category discussed. A semantic-dependent encoding scheme also defined that, together be used process low time memory consumption. Applications described, such as intrusion detection application firewalls.