scholarly journals Intelligent data analysis: issues and challenges

1996 ◽  
Vol 11 (4) ◽  
pp. 365-371 ◽  
Author(s):  
Xiaohui Liu

Two phenomena have probably affected modern data analysts' lives more than anything else. First, the size of real-world data sets is getting increasingly large, especially during the last decade or so. Second, modern computational methods and tools are being developed which add further capability to traditional statistical analysis tools. These two developments have created a new range of problems and challenges for analysts, as well as new opportunities for intelligent systems in data analysis.

Entropy ◽  
2021 ◽  
Vol 23 (5) ◽  
pp. 507
Author(s):  
Piotr Białczak ◽  
Wojciech Mazurczyk

Malicious software utilizes HTTP protocol for communication purposes, creating network traffic that is hard to identify as it blends into the traffic generated by benign applications. To this aim, fingerprinting tools have been developed to help track and identify such traffic by providing a short representation of malicious HTTP requests. However, currently existing tools do not analyze all information included in the HTTP message or analyze it insufficiently. To address these issues, we propose Hfinger, a novel malware HTTP request fingerprinting tool. It extracts information from the parts of the request such as URI, protocol information, headers, and payload, providing a concise request representation that preserves the extracted information in a form interpretable by a human analyst. For the developed solution, we have performed an extensive experimental evaluation using real-world data sets and we also compared Hfinger with the most related and popular existing tools such as FATT, Mercury, and p0f. The conducted effectiveness analysis reveals that on average only 1.85% of requests fingerprinted by Hfinger collide between malware families, what is 8–34 times lower than existing tools. Moreover, unlike these tools, in default mode, Hfinger does not introduce collisions between malware and benign applications and achieves it by increasing the number of fingerprints by at most 3 times. As a result, Hfinger can effectively track and hunt malware by providing more unique fingerprints than other standard tools.


Author(s):  
Noga Fallach ◽  
Gabriel Chodick ◽  
Matanya Tirosh ◽  
Elon Eisenberg ◽  
Omri Lubovsky

2020 ◽  
Vol 289 (1) ◽  
pp. 12-28 ◽  
Author(s):  
S. Eloranta ◽  
K. E. Smedby ◽  
P. W. Dickman ◽  
T. M. Andersson

Author(s):  
Abdilkerim Oyman ◽  
Mustafa Başak ◽  
Melike Özçelik ◽  
Deniz Tataroğlu Özyükseler ◽  
Selver Işık ◽  
...  

Sign in / Sign up

Export Citation Format

Share Document