Identification of paths and parameters in RESTful URLs for the detection of web Attacks

Attribute-specific models are quite effective in the detection of web attacks. Nevertheless, none of existing attribute-specific models can be applied directly to modern web applications, which are dominant today and which use RESTful URLs. The barrier is that paths and parameters are mixed in URLs so that detection systems cannot identify which programs and attributes are which. To remove this barrier, this paper is the first one dealing with the identification of paths and parameters in RESTful URLs. The problem is raised, then a simple yet effective method to solve the problem is proposed. We validate our method via experiments.