An On-Line Learning Statistical Model to Detect Malicious Web Requests

Lampesberger, Harald; Winter, Philipp; Zeilinger, Markus; Hermann, Eckehard

doi:10.1007/978-3-642-31909-9_2

Cited by 9 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hidden Markov model web (HMM-Web) [42] instruments multiple hidden Markov models to analyze URI paths observed in HTTP GET requests. Lampesberger et al [105,106] propose an anomaly detection system for URI paths in web requests based on a variable-order Markov model that continuously learns without a separate training phase.…”

Section: Anomaly Detection In Web Interactionmentioning

confidence: 99%

See 1 more Smart Citation

Monitoring of Client-Cloud Interaction

Lampesberger

Rady

2015

Correct Software in Web Applications and Web Services

Self Cite

View full text Add to dashboard Cite

When a client consumes a cloud service, computational liabilities are transferred to the service provider in accordance to the cloud paradigm, and the client loses some control over software components. One way to raise assurance about correctness and dependability of a consumed service and its software components is monitoring. In particular, a monitor is a system that observes the behavior of another system, and observation points that expose the target system's state and state changes are required. Due to the cloud paradigm, popular techniques for monitoring such as code instrumentation are often not available to the client because of limited visibility, lack of control, and black-box software components. Based on a literature review, we identify potential observation points in today's cloud services. Furthermore, we investigate two cloud-specific monitoring applications based on our ongoing research. While service level agreement (SLA) monitoring ensures that agreed-upon conditions between clients and providers are met, language-based anomaly detection monitors the interaction between client and cloud for misuse attempts.

show abstract

Section: Anomaly Detection In Web Interactionmentioning

confidence: 99%

“…The network monitor reconstructs complete or prefixes of higher-layer transmissions from packet traces collected from the network communication between a client and a service [105,106]. Reassembly needs to consider properties of higher-level protocols; in particular, TCP segments can be out of order.…”

Section: Network Layermentioning

confidence: 99%

Monitoring of Client-Cloud Interaction

Lampesberger

Rady

2015

Correct Software in Web Applications and Web Services

Self Cite

View full text Add to dashboard Cite

show abstract

“…In the context of software systems, formal verification can be regarded as a decision problem [105]. Namely, if it is given a programming language L and a formal language F suitable to express properties of programs in L (e.g., completeness, soundness, compactness, liveness, and safety and halting problems), the problem of verifying L programs against F properties can be considered as follows [105]:…”

Section: The Problem Of Verificationmentioning

confidence: 99%

“…Although there exists some artificial subset of formal languages which are extended with some (first-order) logics and for which the above problem is always decidable (e.g., sequential nullary ASMs conjugated with a first-order branching temporal logic [105]), their computational power and expressiveness are limited.…”

Section: The Problem Of Verificationmentioning

confidence: 99%

Section: Anomaly Detection In Web Interactionmentioning

confidence: 99%

See 1 more Smart Citation