{'fraction_non_alphanumeric': 0.010752688172043012, 'fraction_numerical': 0.0, 'mean_word_length': 5.237113402061856, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
DWVP : Detection of Web Application Vulnerabilities using Parameters of Web Form

As daily use of Internet is expanding exponentially and access of Internet become more prevalent in our daily life but at the same time web application are becoming most attractive targets for hacker and cyber criminals. In this paper we are implementing intrusion detection system with the use of karp-rabin string matching algorithm for detecting input validation attacks in the web application running on internet. The existing IDS for Input validation attacks are programming language dependent. The proposed IDS is a language independent system that works for any web application developed with the use of any programming languages. In addition proposed technique detects directory traversal attacks, buffer overflow attacks, cross site scripting attacks and SQL injection attacks, those attacks can not be detected in the existing IDS. This is an automatic technique for detection of such attacks over the internet. Proposed technique is based on the web application parameters which are in form of POST and GET which has generalized structure and values. This technique reduces analysis time of input validation attacks.