Modeling Intrusion Detection for Web Attacks using Deep Learning

Saeed Hasanzadeh Asl¹ Maryam Alizadeh²

Abstract :
Web applications are popular targets for cyber-attacks because they are network accessible and often contain vulnerabilities. An intrusion detection system monitors web applications and issues alerts when an attack attempt is detected. Existing implementations of intrusion detection systems usually extract features from network packets or string characteristics of input that are manually selected as relevant to attack analysis. Manual selection of features is time-consuming and requires in-depth security domain knowledge. Moreover, large amounts of labeled legitimate and attack request data is needed by supervised learning algorithms to classify normal and abnormal behaviors, which is often expensive and impractical to obtain for production web applications. This paper provides three contributions to the study of autonomic intrusion detection systems. First, we evaluate the feasibility of an unsupervised/semi-supervised approach for web attack detection based on the Robust Software Modeling Tool (RSMT), which autonomically monitors and characterizes the runtime behavior of web applications. Second, we describe how RSMT trains a stacked denoising autoencoder to encode and reconstruct the call graph for end-to-end deep learning, where a low-dimensional representation of the raw features with unlabeled request data is used to recognize anomalies by computing the reconstruction error of the request data. Third, we analyze the results of empirically testing RSMT on both synthetic datasets and production applications with intentional vulnerabilities. Our results show that the proposed approach can efficiently and accurately detect attacks, including SQL injection, cross-site scripting, and deserialization, with minimal domain knowledge and little labeled training data.

Keywords : deep learning web security intrusion detection cyber attacks

---

زبان مقاله : انگلیسی
محور مقاله : علوم مهندسی
محل انتشار : کنفرانس بین المللی مهندسی و تکنولوژی - نروژ
آدرس وب سایت کنفرانس : 12icet.com
کد IOI مقاله : XBEG-DDDCC
لینک مستقیم مقاله : https://isnac.ir/XBEG-DDDCC
نمایش چکیده فارسی : https://isnac.ir/SA/XBEG-DDDCC

سایر مقالات ارائه دهنده

1. Detect and Cope with Cyber Attacks in Industrial Infrastructure using Deep Learning
2. Modeling Intrusion Detection for Web Attacks using Deep Learning
3. Attacking and Exploiting Public Transportation System Location Services

سایر مقالات محل انتشار

1. مدل سازی هندسی در گرافیک کامپیوتری
2. جایگاه نمادهای آرکی تایپ در ماندگاری اثر معماری و تاثیرات آن بر مخاطب، از دیدگاه روانشناسی اگزیستانسیالیسم
3. Research on the relationship between leadership style and job satisfaction
4. موتور های مفصلی هوشمند
5. بررسی حقوق متقابل مردم و نیروی انتظامی کشور
6. An Introduction to the paradigm of futures study and an investigation on the basic scenario planning with emphasis on native development
7. تأثیر مدیریت شهری در ارتقای شاخص‌های فرهنگی و اجتماعی شهروندان مورد مطالعه: شهروندان ساکن در ناحیه 2 منطقه 18 شهرداری تهران
8. تلفیق مهندسی ارزش و مهندسی امنیت اطلاعات در مدیریت سازمانی
9. نرم افزار ثبت وزن کودک و توصیه های پزشکی بر اساس نرم افزار
10. A General Study and Reviwe about Types of Hydrocarbon Flow Regimes in The Oil and Gas Transmission Pipelines
11. سوختهای فسیلی(نفت.بنزین.گازوییل.وتمامی مشتقات نفتی)جای خودتان را به آب بدهید
12. رفتار سازه¬های بلند در کنار گودبرداری¬های عمیق در مناطق نزدیک گسل
13. مبانی توسعه حمل و نقل شهری انسان محور برای ایجاد زندگی پایدار شهری
14. افزایش ولتاژ
15. Modeling Intrusion Detection for Web Attacks using Deep Learning