|
ИСТИНА |
Войти в систему Регистрация |
ИПМех РАН |
||
Algorithms for network server anomaly behavior detection without traffic content inspectionтезисы доклада
Информация о цитировании статьи получена из
Web of Science,
Scopus
Дата последнего поиска статьи во внешних источниках: 16 декабря 2018 г.
- Авторы: Eliseev Vladimir, Gurina Anastasiya
- Сборник: Proceedings of the 9th International Conference on Security of Information and Networks
- Тезисы
- Год издания: 2016
- Место издания: Association for Computing Machinery (ACM)
- Первая страница: 67
- Последняя страница: 71
- DOI: 10.1145/2947626.2947643
- Аннотация: A problem of anomaly behavior detection for network server without traffic inspection is discussed. An importance of the problem is proved in a context of broad use of typical communication engines in servers and Internet of Things. A cross-correlation function for request-response characterization is introduced. An applicability of this approach was probed on SSH, DNS, HTTP and HTTPS real traffic. Two algorithms are provided to work with cross-correlation functions: one is based on Pearson correlation coefficient and another based on neural network one class classifier. Traffic of real HTTP and HTTPS servers is used to investigate algorithms and analyze their results. Key features and important parameters of both algorithms are highlighted. Not typical request-response events detection is demonstrated on test traffic series. Actuality and lightweight quality of the approach are emphasized regarding intrusion detection system implementation for typical servers, M2M and IoT applications.
- Добавил в систему: Елисеев Владимир Леонидович
Прикрепленные файлы
| № | Имя | Описание | Имя файла | Размер | Добавлен |
|---|---|---|---|---|---|
| 1. | Полный текст | sin2016_guel_eng_revised1.pdf | 569,6 КБ | 1 марта 2020 [vlad-eliseev] | |
| 2. | sin2016_guel_slides_eng.pdf | sin2016_guel_slides_eng.pdf | 1,2 МБ | 1 марта 2020 [vlad-eliseev] |