DokFLeed.Net --Security Portal - Labrova Web IDS/IPS Started

IDSs are considered one of the most effective Technical Access Control Systems. Their function varies among being Detective controls only or Detective and Preventative (IPS) as well. Apart from that, there is a fact that Businesses are migrating most of their services and operations to be Web-Enabled. This fact enhanced the trend of attacks known as Web-Attacks including SQL Injections methods. Combining the facts about IDS and the increasing amount of Web Attacks, a new type of IDS should be developed. IRAX project is officially started on http://www.dokfleed.net/labrova/ , taking after the former CGI-Shield. IRAX (project name) is capable of acting as a Deterrent, Detective and Preventative Control against web attacks. It intercepts all submitted parameters and compares them with its Knowledge-base, if parameters passed are identified as a threat, values will be blocked, report will be shown to the attacker and the attack details will be logged into the IRAX database. Applying this solution, even if a web application is vulnerable, still it can not be exploited, since the malicious values can not be passed to the application. When this solution is widely spread, a banner on the website noting that it uses IRAX services, will deter most of the attacks , since they know IP and other machine information will be logged. Even if an attacker desguises using a HTTP Proxy, the attack will be detected and prevented. The IRAX knowledge base is extendable and will be updated periodically and only requires a web server with PHP enabled.