I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to the attacker when he tries to break into my website.
Is there any resource covering/analyzing specific attack vectors? With specific I mean something like list of rules: when user tries to write
' character into username field, it's definitely an attack attempt (which is not, but
' or 'x'=x' probably is).
My main goal is to effectively log and respond to attack attempts and avoid false positives as much as possible (it should never happen that the system bans legal user). We are talking here probably mainly about
XSS and maybe
Request threshold (something like 50 requests in 1 seconds is suspicious - is it really?). If you think I should respond to another type of action too, feel free to suggest it and write a reason why should I focus on this type of action.