Doubleguard: Intrution Detection Using Virtualization

Abstract

With increasing reliance on internet services and applications enabling the
management of personal information from anywhere, there has been increase in
application and data complexity which led to the multi-tiered design of systems where web
servers run the front end logic of the application and data stored/fetched from database or
file servers. Since there has been huge surge in data theft, these applications over the years
has become more vulnerable to intrusions. To identify the intrusions in a more accurate
manner we implemented Double Guard using Apache web server and My SQL with
lightweight virtualization. With the system in place over a period of few weeks, we were
able to expose a wide range of attacks with 100% accuracy in both static and dynamic web
services.