Detecting zero-day attacks using context-aware anomaly detection at the application-layer

2016 ◽  
Vol 16 (5) ◽  
pp. 475-490 ◽  
Author(s):  
Patrick Duessel ◽  
Christian Gehl ◽  
Ulrich Flegel ◽  
Sven Dietrich ◽  
Michael Meier
Keyword(s):  
Anomaly Detection ◽  
Context Aware ◽  
Application Layer

scholarly journals Anomaly Detection for Application Layer User Browsing Behavior Based on Attributes and Features

2018 ◽  
Vol 1069 ◽  
pp. 012072 ◽  
Author(s):  
Xiong Luo ◽  
Xiaoqiang Di ◽  
Xu Liu ◽  
Hui Qi ◽  
Jinqing Li ◽  
...  
Keyword(s):  
Anomaly Detection ◽  
Application Layer ◽  
Behavior Based ◽  
Browsing Behavior

AutoGuard: A Dual Intelligence Proactive Anomaly Detection at Application-Layer in 5G Networks

2021 ◽  
pp. 715-735
Author(s):  
Taous Madi ◽  
Hyame Assem Alameddine ◽  
Makan Pourzandi ◽  
Amine Boukhtouta ◽  
Moataz Shoukry ◽  
...  
Keyword(s):  
Anomaly Detection ◽  
Application Layer ◽  
5G Networks

Interactive Context-Aware Anomaly Detection Guided by User Feedback

2019 ◽  
Vol 49 (6) ◽  
pp. 550-559 ◽  
Author(s):  
Yang Shi ◽  
Maoran Xu ◽  
Rongwen Zhao ◽  
Hao Fu ◽  
Tongshuang Wu ◽  
...  
Keyword(s):  
Anomaly Detection ◽  
User Feedback ◽  
Context Aware

Context-Aware Activity Recognition and Anomaly Detection in Video

2013 ◽  
Vol 7 (1) ◽  
pp. 91-101 ◽  
Author(s):  
Yingying Zhu ◽  
Nandita M. Nayak ◽  
Amit K. Roy-Chowdhury
Keyword(s):  
Anomaly Detection ◽  
Activity Recognition ◽  
Context Aware

Detecting Application-Layer Attacks Based on Hidden Semi-Markov Models

2014 ◽  
Vol 631-632 ◽  
pp. 923-927
Author(s):  
Bai Lin Xie ◽  
Qian Sheng Zhang
Keyword(s):  
Anomaly Detection ◽  
Markov Models ◽  
Attack Detection ◽  
Detection Accuracy ◽  
Application Layer ◽  
Arrival Times ◽  
Positive Ratio ◽  
False Positive Ratio ◽  
Theory Application ◽  
Application Layer Protocol

This paper presents an application-layer attack detection method based on hidden semi-markov models. In this method, the keywords of an application-layer protocol and their inter-arrival times are used as the observations, a hidden semi-markov model is used to describe the application-layer behaviors of a normal user who is using some application-layer protocol. This method is also based anomaly detection. In theory, application-layer anomaly detection can identify the known, unknown and novel attacks happened on application-layer. The experimental results show that this method can identify several application-layer attacks, and has high detection accuracy and low false positive ratio.

Sign in / Sign up

Export Citation Format

Share Document