ARC: Protecting against HTTP Parameter Pollution Attacks Using Application Request Caches

摘要: HTTP Parameter Pollution (HPP) vulnerabilities allow attackers to exploit web applications by manipulating the query parameters of requested URLs. In this paper, we present Application Request Cache (ARC), a framework for protecting against HPP exploitation. ARC hosts all benign URL schemas, which act as generators complete functional set URLs that compose application's logic. For each incoming request, exports URL, extracts associated schema, and searches it in already known schemas. case schema is not found, request rejected, event recorded. ARC can be transparently integrated with existing without any modifications server client code. It implemented Google's Go language uses efficient data structures storing imposing negligible computational overhead on application server. When running 4-core Linux server, process hundreds thousands requests per second. A typical resolution scale microseconds.