AppSensor Guide Application-Specific Real-Time Attack Detection & Response Version 48 (Draft)
Chapter 21 : Fully Integrated (AppSensor Core)
Download 11.95 Mb.
|
- Navigate this page:
- Description
- AppSensor scope
- Source code
- Implementation
- Related implementations
Chapter 21 : Fully Integrated (AppSensor Core)IntroductionPrior to the development of the SOAP Web Services demonstration implementation, Michael Coates and John Melton [anyone else? KW???] created a pure integrated Java version. Like “AppSensor WS” above, this is a reference implementation and is a development branch included within the scope of the OWASP AppSensor Project called “AppSensor Core”. DescriptionAppSensor Core handles the collection of event data, and selection of appropriate responses based on a policy defined as a Java properties files. The detection points and responses have to be built into the application at appropriate points in the logic. Code from AppSensor Core is then executed during run time as events occur. Schematic Arrangement of the AppSensor Core Reference Implementation 
AppSensor scopeThe selection of detection points, where they are added, and how the software responds, are application and organization dependent. However, the following detection point and response categories are supported: List of Detection Point Categories Supported by AppSensor Core
List of Response Categories Supported by AppSensor Core
The individual interfaces can be extended in order to modify AppSensor for a particular environment, and to support additional detection points and response actions. Source codeThe source code and appsensor.jar file are available from: https://code.google.com/p/appsensor/ https://code.google.com/p/appsensor/downloads/detail?name=AppSensor-0.1.3.jar The version at the time of writing is 0.1.3 and is issued under the BSD 3-Clause License112. ImplementationA developer guide has been provided at: https://www.owasp.org/index.php/AppSensor_Developer_Guide [Check] ConsiderationsThis Java implementation has the following dependencies: OWASP ESAPI Java library JavaMail libraries (activation and mail jar files) Servlet/JSP libraries Logging API library (log4j by default) This AppSensor implementation is no longer under development. Related implementationsThis Java implementation method was utilized in the comparative research and experiment undertaken independently by Pål Thomassen “AppSensor: Attack-Aware Applications Compared Against a Web Application Firewall and an Intrusion Detection System”33. A description of how AppSensor Core was implemented on SimpleShiroSecuredApplication has been written by Mária Jurčovičová 114. The AppSensor Core implementation has also been ported to .Net by Luke Briner and is available to download at: https://www.owasp.org/index.php/File:AppSensor_Core_-_dotNet.zip See also Chapter 24 : Invocation of AppSensor Code Using Jni4Net. Directory: images -> archive images -> World-renowned vocal ensemble sweet honey in the rock images -> Peoples Voice Café History archive -> J. Welles Henderson Archives and Library archive -> The Heartbeat Beacon Abstract archive -> E9-1-1 Heartbeat Abstract archive -> HL7 Mobile Health Application Functional Framework; Consumer mhaFF, Release 1 (pi id: 1182) archive -> Opensfs benchmarking Working Group I/o survey Report archive -> Opensfs benchmarking Working Group I/o survey Report archive -> Need a computer and can't afford one? Download 11.95 Mb. Share with your friends:
| |||||||||||||||||||||||||||||||||||||||||||||||||||||