3 added 13 characters in body; edited title
source | link

Detecting website attack attempts to attack a website?

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to the attacker, when he tries to break into my website. 

Is there any resource covering/analyzing specific attack vectors? With specific I mean something like list of rules: when user tries to write ' character into username field, it's definitely an attack attempt (which is not, but ' or 'x'=x' probably is).

My main goal is to effectively log and respond to attack attempts and avoid false positives as much as possible (it should never happen that the system bans legal user). We are talking here probably mainly about SQL injection, XSS and maybe Request threshold (sth.something like 50 requestrequests in 1 seconds is suspicious - is it really?). If you think I should respond to another type of action too, feel free to suggest it and write a reason why should I focus on this type of action.

Detecting website attack attempts

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to attacker, when he tries to break into my website. Is there any resource covering/analyzing specific attack vectors? With specific I mean something like list of rules: when user tries to write ' character into username field, it's definitely an attack attempt (which is not, but ' or 'x'=x' probably is).

My main goal is to effectively log and respond to attack attempts and avoid false positives as much as possible (it should never happen that the system bans legal user). We are talking here probably mainly about SQL injection, XSS and maybe Request threshold (sth. like 50 request in 1 seconds is suspicious - is it really?). If you think I should respond to another type of action too, feel free to suggest it and write a reason why should I focus on this type of action.

Detecting attempts to attack a website?

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to the attacker when he tries to break into my website. 

Is there any resource covering/analyzing specific attack vectors? With specific I mean something like list of rules: when user tries to write ' character into username field, it's definitely an attack attempt (which is not, but ' or 'x'=x' probably is).

My main goal is to effectively log and respond to attack attempts and avoid false positives as much as possible (it should never happen that the system bans legal user). We are talking here probably mainly about SQL injection, XSS and maybe Request threshold (something like 50 requests in 1 seconds is suspicious - is it really?). If you think I should respond to another type of action too, feel free to suggest it and write a reason why should I focus on this type of action.

2 edited tags
| link
1
source | link

Detecting website attack attempts

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to attacker, when he tries to break into my website. Is there any resource covering/analyzing specific attack vectors? With specific I mean something like list of rules: when user tries to write ' character into username field, it's definitely an attack attempt (which is not, but ' or 'x'=x' probably is).

My main goal is to effectively log and respond to attack attempts and avoid false positives as much as possible (it should never happen that the system bans legal user). We are talking here probably mainly about SQL injection, XSS and maybe Request threshold (sth. like 50 request in 1 seconds is suspicious - is it really?). If you think I should respond to another type of action too, feel free to suggest it and write a reason why should I focus on this type of action.