Design And Implementation Of Web Intrusion Detection System Based On Cross-Browser Fingerprint Recognition

In today's network attack and defense environment,administrators and defenders of Web application systems face many problems that are difficult to solve.One of the urgent problems to be solved is the problem of unequal relationship between attack and defense.Even if the administrator captures the attack request,it is difficult to accurately locate the attacker.When an attacker completes an attack attempt,the web service can still be accessed unimpeded when accessed again,so the attacker can continuously try the attack until it succeeds,which will greatly increase the probability of successful attack.In order to solve this problem,this article will use browser fingerprint extraction technology and cross-browser fingerprint extraction technology to locate each visitor and establish a Web intrusion detection system that can identify the identity of the visitor.This kind of fingerprint tracking technology has been widely used in the advertising industry,and the technology can be used to accurately deliver advertisements to users.This paper combines it with an intrusion detection system to make the intrusion detection system have more information to locate the attacker.The system uses the JavaScript language to write the fingerprint extraction program,and extracts the fingerprint information by using the interface provided by the browser.The collected information includes the identity token information delivered by the server,the fingerprint information that can represent the browser,and the fingerprint of the electronic device that can represent the user,information.This new type of Web intrusion detection system will use this information to identify each visitor's identity,thus completing the record of the attacker's behavior.This article uses identity tokens,browser fingerprint extraction and cross-browser fingerprint extraction to identify users in three ways.The article introduces in detail the extraction method of each kind of fingerprint information,designs and implements a Web intrusion detection system that combines this technology,and proposes an effective solution for the actual problems from the perspective of active defense.