arrow
返回

Detecting Web Attacks From HTTP Weblogs Using Variational LSTM Autoencoder Deviation Network

delete2024-09-01
delete0
PRE
AI
R
Rikhi Ram Jagat *
P
Pradeep Singh
DOI:10.1109/TSC.2024.3453748delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Web attacks penetrate the web applications' security through unauthorized access to sensitive information, disrupting services, and stealing data. Conventionally, rule-based statistical methods distinguish attackers from legitimate users. However, the training through manually extracted weblog features is time-consuming and requires subject expertise. Additionally, the supervised attack classification method needs massive, labeled weblog data, which is expensive and unfeasible. Also, the unsupervised classification techniques have resolved the labeled data insufficiency problem, but their detection performance is unreliable. Recent studies focus on recognizing web attacks through deep neural network-based anomaly detection. Hence, this study proposes an anomaly detection-based Variational LSTM Autoencoder Deviation Network (VLADEN) for recognizing web attacks from weblogs. This work resolves the aforementioned issues by extracting the aberrant information encoded in weblog request data to detect web attacks. VLADEN works in three stages: data preprocessing, anomaly and reference score generation, and classification. The variational LSTM self-encoding-based reference score generation ensures that the anomaly score deviates from the normal data. The proposed model is experimentally validated on three publicly available datasets (CSIS2010, FWAF, and HTTPParams) and evaluated using AUC-ROC and AUC-PR-based evaluation metrics. The results demonstrate the models' superior performance in detecting attack requests with minimum domain knowledge and labeled data.
Keyword:
Feature extraction
Anomaly detection
Long short term memory
Security
SQL injection
HTTP
Deep learning
deep learning
deviation network
long short-term memory
variational autoencoder
web attack
weblog

期刊

IEEE Transactions on Services Computing 封面图
IEEE Transactions on Services Computing
IF:
5.8
论文数:
2.1K
被引数:
6.5K

机构

N
national institute of technology (nit system)
学者数:
4.0W
论文数: 3.7W
被引数: 31
引用论文

引用论文

Recent advances and applications of deep learning methods in materials science深度学习方法在材料科学中的最新进展与应用
err2022-04-05
err407
errOAAI
errChoudhary, Kamal; DeCost, Brian; Chen, Chi; Jain, Anubhav; Tavazza, Francesca; Cohn, Ryan; Park, Cheol Woo; Choudhary, Alok; Agrawal, Ankit; Billinge, Simon J. L.; Holm, Elizabeth; Ong, Shyue Ping; Wolverton, Chris
err分享
err收藏
学者 查看更多内容