Rectify: Black-Box Intrusion Recovery in PaaS Clouds
Rectify is a new approach to recover from intrusions on applications running in a PaaS. It is a service designed to be deployed alongside the application in a PaaS container. without requiring modifications to the software and the recovery can be performed by a system administrator. Machine learning techniques are used to associate the requests received by the application to the statements issued to the database. The statements issued in result of malicious requests can be identified and their effects reversed under control of the administrator.
For more information regarding Rectify please visit http://www.gsd.inesc-id.pt/~dmatos/publication/rectify/
The following instructions will help you get started with a local deployment of Rectify with a Wordpress application as the protected application.
Rectify was built using Maven and Docker. Make sure you have both installed before continuing.
First build Rectify by executing
Then start Rectify with a WordPress application using the following command:
The following table describes the addresses the services started by the docker-compose command:
|Rectify Admin Console||8080||http://localhost:8080/rectify|
- Maven - Dependency Management
- Wordpress - The protected application
- MySQL - For storing the logs
- Docker - For deployment
- Tomcat - The application server used for Rectify
- David Matos - Development of the system - Github
This project is licensed under the MIT License - see the LICENSE.md file for details