Light-weight Detection of HTTP Attacks for Large-scale Web sites

摘要：

This paper is focused on a new type sneaky HTTP attack which has no obvious anomaly characteristics. A new lightweight anomaly detection scheme is introduced for large-scale Web sites whose workload is much heavier and more bursty than the general Web sites. Based on stack distance values of HTTP requests, an improved event-driven hidden semi-Markov model is applied to describe the stochastic process of HTTP traffic. Normalized Viterbi score of incoming HTTP request sequence fitting to the given model is used as a measure criterion. Experiments based on a real Web traffic and an emulated attack are implemented to valid the proposal.

作者: Yi Xie Shun-zheng Yu

作者单位: Department of Electrical and Communication Engineering,Sun Yat-Sen University,Guangzhou 510275,P.R.China.

会议类型: 国际会议

会议名称: The 11th IEEE International Conference on Communications Systems(第11届电子和电气工程师协会国际通信系统会议)(IEEE ICCS 2008)

会议地点: 广州

会议语种:英文

在线出版日期: 2008-11-19（万方平台首次上网日期，不代表论文的发表时间）