Web-Proxy-Based Authentication and Authorization Mechanism Against Client-Based HTTP Attacks

Therehasbeenahugedevelopmentinhowtoreadadatafromsensordevicesuchasinfrared(IR) device, temperature device, etc. Sensor data collection has wide issues of information security. Informationsecurityisalsothecurrenttopicofdiscussionduetoitsuseinapplicationinvarious fields.Therearenumberofusershavingdifferentuserroleswithsmartdevices.Thesepersonneluse devicesforvariouspurposeslikeaccesstheinformationfromvariousdevicessuchaswirelesssensors sothatasecureandefficientmutualauthenticationandauthorizationschemeisusedinthesmartgrid networktopreventvariousinsiderandoutsiderattacksoninformationordata.Therefore,proposed workdesignnovelapproachtoovercomethatattack,malicioususeranddevicebyauthentication andauthorization.Thetechniqueofauthenticateauthenticateseachuserroledynamicallyusinga signaturebasedaccesscontrolandverifiestheidentityofusertogetherwiththedevice.Accesscontrol mechanismnotonlypreventsunauthorizedaccessbutalsopreventmisuseofdata.Existingsystem generatessharedkeyforeachsessionbutitgenerateshugeoverheadandnotsuitablefortherealworldapplicationssoinproposedsystemweusedpublickeycryptographytoreducetheoverhead. KEyWoRdS Anomaly Detection, Authentication, Authorization, DDoS Attack, SQL Injection