Matches in SemOpenAlex for { <https://semopenalex.org/work/W3011610465> ?p ?o ?g. }
- W3011610465 endingPage "82" @default.
- W3011610465 startingPage "67" @default.
- W3011610465 abstract "The performance of anomaly-based intrusion detection systems depends on the quality of the datasets used to form normal activity profiles. Suitable datasets should include high volumes of real-life data free from attack instances. On account of this requirement, obtaining quality datasets from collected data requires a process of data sanitization that may be prohibitive if done manually, or uncertain if fully automated. In this work, we propose a sanitization approach for obtaining datasets from HTTP traces suited for training, testing, or validating anomaly-based attack detectors. Our methodology has two sequential phases. In the first phase, we clean known attacks from data using a pattern-based approach that relies on tools that detect URI-based known attacks. In the second phase, we complement the result of the first phase by conducting assisted manual labeling systematically and efficiently, setting the focus of expert examination not on the raw data (which would be millions of URIs), but on the set of words that compose the URIs. This dramatically downsizes the volume of data that requires expert discernment, making manual sanitization of large datasets feasible. We have applied our method to sanitize a trace that includes 45 million requests received by the library web server of the University of Seville. We were able to generate clean datasets in less than 84 h with only 33 h of manual supervision. We have also applied our method to some public benchmark datasets, confirming that attacks unnoticed by signature-based detectors can be discovered in a reduced time span." @default.
- W3011610465 created "2020-03-23" @default.
- W3011610465 creator A5015226343 @default.
- W3011610465 creator A5051570639 @default.
- W3011610465 creator A5051920060 @default.
- W3011610465 creator A5061177020 @default.
- W3011610465 creator A5071465643 @default.
- W3011610465 date "2020-08-01" @default.
- W3011610465 modified "2023-10-03" @default.
- W3011610465 title "A methodology for conducting efficient sanitization of HTTP training datasets" @default.
- W3011610465 cites W1577239570 @default.
- W3011610465 cites W1967331239 @default.
- W3011610465 cites W1977519794 @default.
- W3011610465 cites W1981738628 @default.
- W3011610465 cites W1982304603 @default.
- W3011610465 cites W1985987493 @default.
- W3011610465 cites W2004086221 @default.
- W3011610465 cites W2046163812 @default.
- W3011610465 cites W2059001009 @default.
- W3011610465 cites W2085047345 @default.
- W3011610465 cites W2099940443 @default.
- W3011610465 cites W2103154003 @default.
- W3011610465 cites W2103414007 @default.
- W3011610465 cites W2108513376 @default.
- W3011610465 cites W2142889610 @default.
- W3011610465 cites W2151856781 @default.
- W3011610465 cites W2155409100 @default.
- W3011610465 cites W2296509296 @default.
- W3011610465 cites W2296719434 @default.
- W3011610465 cites W2579920576 @default.
- W3011610465 cites W2747144285 @default.
- W3011610465 cites W2766072226 @default.
- W3011610465 cites W2789828921 @default.
- W3011610465 cites W2790483978 @default.
- W3011610465 cites W2889249015 @default.
- W3011610465 doi "https://doi.org/10.1016/j.future.2020.03.033" @default.
- W3011610465 hasPublicationYear "2020" @default.
- W3011610465 type Work @default.
- W3011610465 sameAs 3011610465 @default.
- W3011610465 citedByCount "5" @default.
- W3011610465 countsByYear W30116104652022 @default.
- W3011610465 countsByYear W30116104652023 @default.
- W3011610465 crossrefType "journal-article" @default.
- W3011610465 hasAuthorship W3011610465A5015226343 @default.
- W3011610465 hasAuthorship W3011610465A5051570639 @default.
- W3011610465 hasAuthorship W3011610465A5051920060 @default.
- W3011610465 hasAuthorship W3011610465A5061177020 @default.
- W3011610465 hasAuthorship W3011610465A5071465643 @default.
- W3011610465 hasConcept C111472728 @default.
- W3011610465 hasConcept C111919701 @default.
- W3011610465 hasConcept C120665830 @default.
- W3011610465 hasConcept C121332964 @default.
- W3011610465 hasConcept C124101348 @default.
- W3011610465 hasConcept C13280743 @default.
- W3011610465 hasConcept C138885662 @default.
- W3011610465 hasConcept C154945302 @default.
- W3011610465 hasConcept C160145156 @default.
- W3011610465 hasConcept C177264268 @default.
- W3011610465 hasConcept C185798385 @default.
- W3011610465 hasConcept C192209626 @default.
- W3011610465 hasConcept C199360897 @default.
- W3011610465 hasConcept C205649164 @default.
- W3011610465 hasConcept C23123220 @default.
- W3011610465 hasConcept C2779530757 @default.
- W3011610465 hasConcept C41008148 @default.
- W3011610465 hasConcept C58489278 @default.
- W3011610465 hasConcept C739882 @default.
- W3011610465 hasConcept C98045186 @default.
- W3011610465 hasConceptScore W3011610465C111472728 @default.
- W3011610465 hasConceptScore W3011610465C111919701 @default.
- W3011610465 hasConceptScore W3011610465C120665830 @default.
- W3011610465 hasConceptScore W3011610465C121332964 @default.
- W3011610465 hasConceptScore W3011610465C124101348 @default.
- W3011610465 hasConceptScore W3011610465C13280743 @default.
- W3011610465 hasConceptScore W3011610465C138885662 @default.
- W3011610465 hasConceptScore W3011610465C154945302 @default.
- W3011610465 hasConceptScore W3011610465C160145156 @default.
- W3011610465 hasConceptScore W3011610465C177264268 @default.
- W3011610465 hasConceptScore W3011610465C185798385 @default.
- W3011610465 hasConceptScore W3011610465C192209626 @default.
- W3011610465 hasConceptScore W3011610465C199360897 @default.
- W3011610465 hasConceptScore W3011610465C205649164 @default.
- W3011610465 hasConceptScore W3011610465C23123220 @default.
- W3011610465 hasConceptScore W3011610465C2779530757 @default.
- W3011610465 hasConceptScore W3011610465C41008148 @default.
- W3011610465 hasConceptScore W3011610465C58489278 @default.
- W3011610465 hasConceptScore W3011610465C739882 @default.
- W3011610465 hasConceptScore W3011610465C98045186 @default.
- W3011610465 hasFunder F4320310967 @default.
- W3011610465 hasFunder F4320323891 @default.
- W3011610465 hasLocation W30116104651 @default.
- W3011610465 hasOpenAccess W3011610465 @default.
- W3011610465 hasPrimaryLocation W30116104651 @default.
- W3011610465 hasRelatedWork W1488266984 @default.
- W3011610465 hasRelatedWork W2027108423 @default.
- W3011610465 hasRelatedWork W2046746363 @default.
- W3011610465 hasRelatedWork W2115406588 @default.
- W3011610465 hasRelatedWork W2141254179 @default.