Matches in SemOpenAlex for { <https://semopenalex.org/work/W1524543412> ?p ?o ?g. }
- W1524543412 endingPage "142" @default.
- W1524543412 startingPage "142" @default.
- W1524543412 abstract "This research introduces an original anomaly detection approach based on a sublexical unit hash model for application level content. This approach is an advance over previous arbitrarily defined payload keyword and 1-gram frequency analysis approaches. Based on the split fovea theory in human recognition, this new approach uses a special hash function to identify groups of neighboring words. The hash frequency distribution is calculated to build the profile for a specific content type. Examples of utilizing the algorithm for detecting spam and phishing emails are illustrated in this dissertation. A brief review of network intrusion and anomaly detection will first be presented, followed by a discussion of recent research initiatives on application level anomaly detection. Previous research results for payload keyword and byte frequency based anomaly detection will also be presented. The drawback in using N-gram analysis, which has been applied in most related research efforts, is discussed at the end of chapter 2. The importance of text content analysis to application level anomaly detection will also be explained. After a background introduction of the split fovea theory in psychological research, the proposed sublexical unit hash frequency distribution based method will be presented. How human recognition theory is applied as the fundamental element for a proposed hashing algorithm will be examined followed by a demonstration of how the hashing algorithm is applied to anomaly detection. Spam email is used as the major example in this discussion. The reason spam and phishing emails are used in our experiments includes the availability of detailed experimental data and the possibility of conducting an in-depth analysis of the test data. An interesting comparison between the proposed algorithm and several popular commercial spam email filters used by Google and Yahoo is also presented. The outcome shows the benefits of the proposed approach. The last chapter provides a review of the research and explains how the previous payload keyword approach evolved into the hash model solution. The last chapter discusses the possibility of extending the hash model based anomaly detection to other areas including Unicode applications." @default.
- W1524543412 created "2016-06-24" @default.
- W1524543412 creator A5004598737 @default.
- W1524543412 creator A5075861804 @default.
- W1524543412 date "2009-01-01" @default.
- W1524543412 modified "2023-09-23" @default.
- W1524543412 title "A sublexical unit based hash model approach for spam detection" @default.
- W1524543412 cites W1482382132 @default.
- W1524543412 cites W1504096948 @default.
- W1524543412 cites W1516506771 @default.
- W1524543412 cites W1543388142 @default.
- W1524543412 cites W1551618785 @default.
- W1524543412 cites W1583975142 @default.
- W1524543412 cites W1587265799 @default.
- W1524543412 cites W1647671624 @default.
- W1524543412 cites W1649985068 @default.
- W1524543412 cites W1790954942 @default.
- W1524543412 cites W1884606608 @default.
- W1524543412 cites W1988814344 @default.
- W1524543412 cites W1990822252 @default.
- W1524543412 cites W1993426957 @default.
- W1524543412 cites W1999427165 @default.
- W1524543412 cites W2002286749 @default.
- W1524543412 cites W2002985807 @default.
- W1524543412 cites W2009119083 @default.
- W1524543412 cites W2021196181 @default.
- W1524543412 cites W2032095999 @default.
- W1524543412 cites W2039489762 @default.
- W1524543412 cites W2060005279 @default.
- W1524543412 cites W2066055909 @default.
- W1524543412 cites W2068232540 @default.
- W1524543412 cites W2099789730 @default.
- W1524543412 cites W2103378897 @default.
- W1524543412 cites W2104290684 @default.
- W1524543412 cites W2105557138 @default.
- W1524543412 cites W2108125317 @default.
- W1524543412 cites W2110523863 @default.
- W1524543412 cites W2111216264 @default.
- W1524543412 cites W2116065364 @default.
- W1524543412 cites W2117002131 @default.
- W1524543412 cites W2118942057 @default.
- W1524543412 cites W2120617515 @default.
- W1524543412 cites W2125507023 @default.
- W1524543412 cites W2126348640 @default.
- W1524543412 cites W2126985156 @default.
- W1524543412 cites W2128660623 @default.
- W1524543412 cites W2130196635 @default.
- W1524543412 cites W2131970275 @default.
- W1524543412 cites W2132429870 @default.
- W1524543412 cites W2132870739 @default.
- W1524543412 cites W2137641605 @default.
- W1524543412 cites W2147191819 @default.
- W1524543412 cites W2150847526 @default.
- W1524543412 cites W2152936979 @default.
- W1524543412 cites W2153134724 @default.
- W1524543412 cites W2155461860 @default.
- W1524543412 cites W2157665255 @default.
- W1524543412 cites W2162240407 @default.
- W1524543412 cites W2166353797 @default.
- W1524543412 cites W2288766236 @default.
- W1524543412 cites W2616975827 @default.
- W1524543412 cites W2619232392 @default.
- W1524543412 cites W2913699766 @default.
- W1524543412 cites W3105682467 @default.
- W1524543412 cites W3168800887 @default.
- W1524543412 cites W341626899 @default.
- W1524543412 cites W34688585 @default.
- W1524543412 cites W42722137 @default.
- W1524543412 cites W44307044 @default.
- W1524543412 cites W6091113 @default.
- W1524543412 hasPublicationYear "2009" @default.
- W1524543412 type Work @default.
- W1524543412 sameAs 1524543412 @default.
- W1524543412 citedByCount "0" @default.
- W1524543412 crossrefType "journal-article" @default.
- W1524543412 hasAuthorship W1524543412A5004598737 @default.
- W1524543412 hasAuthorship W1524543412A5075861804 @default.
- W1524543412 hasConcept C111919701 @default.
- W1524543412 hasConcept C124101348 @default.
- W1524543412 hasConcept C134066672 @default.
- W1524543412 hasConcept C158379750 @default.
- W1524543412 hasConcept C23123220 @default.
- W1524543412 hasConcept C35525427 @default.
- W1524543412 hasConcept C38652104 @default.
- W1524543412 hasConcept C41008148 @default.
- W1524543412 hasConcept C43364308 @default.
- W1524543412 hasConcept C739882 @default.
- W1524543412 hasConcept C99138194 @default.
- W1524543412 hasConceptScore W1524543412C111919701 @default.
- W1524543412 hasConceptScore W1524543412C124101348 @default.
- W1524543412 hasConceptScore W1524543412C134066672 @default.
- W1524543412 hasConceptScore W1524543412C158379750 @default.
- W1524543412 hasConceptScore W1524543412C23123220 @default.
- W1524543412 hasConceptScore W1524543412C35525427 @default.
- W1524543412 hasConceptScore W1524543412C38652104 @default.
- W1524543412 hasConceptScore W1524543412C41008148 @default.
- W1524543412 hasConceptScore W1524543412C43364308 @default.
- W1524543412 hasConceptScore W1524543412C739882 @default.