Server Side Request Forgery (SSRF) is a vulnerability that when exploited, allows the attacker to manipulate the server into making requests to the organization’s internal network. In this research, we explore the various consequences of SSRF and introduce a system which integrates an Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) with a dedicated helper server implemented using Nginx. Machine learning models, including XGBoost, are employed for threat detection, achieving high accuracy (98.55%) in classifying URLs as benign or malicious. The study highlights the efficacy of the proposed approach in mitigating SSRF threats, showcasing the importance of integrating machine learning with network security for robust threat detection and prevention. The practical implications of this approach include enhanced system security, reduced vulnerabilities to SSRF attacks, and improved defense mechanisms against malicious URL requests. Github Link: https://github.com/lolidrk/SSRF_Framework.git

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Mitigating SSRF Threats: Integrating ML and Network Architecture

  • Kalyani Kulkarni,
  • Komalpreet Kaur,
  • Nidhi Torvi,
  • Ayushi Singh,
  • D. Annapurna

摘要

Server Side Request Forgery (SSRF) is a vulnerability that when exploited, allows the attacker to manipulate the server into making requests to the organization’s internal network. In this research, we explore the various consequences of SSRF and introduce a system which integrates an Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) with a dedicated helper server implemented using Nginx. Machine learning models, including XGBoost, are employed for threat detection, achieving high accuracy (98.55%) in classifying URLs as benign or malicious. The study highlights the efficacy of the proposed approach in mitigating SSRF threats, showcasing the importance of integrating machine learning with network security for robust threat detection and prevention. The practical implications of this approach include enhanced system security, reduced vulnerabilities to SSRF attacks, and improved defense mechanisms against malicious URL requests. Github Link: https://github.com/lolidrk/SSRF_Framework.git