An anomaly detection model is trained to detect malicious traffic sessions with a low rate of false positives. A sample feature extractor extracts tokens corresponding to human-readable substrings of incoming unstructured payloads in a traffic session. The tokens are correlated with a list of malicious traffic features and frequent malicious traffic features across the traffic session are aggregated into a feature vector of malicious traffic feature frequencies. An anomaly detection model trained on feature vectors for unstructured malicious traffic samples predicts the traffic session as malicious or unclassified. The anomaly detection model is trained and updated based on its' ongoing false positive rate and malicious traffic features in the list of malicious traffic features that result in a high false positive rate are removed.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING


    Beteiligte:
    ACHLEITNER STEFAN (Autor:in) / XU CHENGCHENG (Autor:in)

    Erscheinungsdatum :

    24.02.2022


    Medientyp :

    Patent


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING

    ACHLEITNER STEFAN / XU CHENGCHENG | Europäisches Patentamt | 2022

    Freier Zugriff

    Malicious traffic detection based on GWO-SVM model

    Liu, Lechao / Zhuang, Yan / Gao, Xufei | IEEE | 2022


    Expressway traffic anomaly detection method

    LYU CHEN / SUN LIN / DING BO et al. | Europäisches Patentamt | 2024

    Freier Zugriff


    TRAFFIC ANOMALY DETECTION METHOD AND APPARATUS

    WU WENHAO / ZHAO YUXIANG | Europäisches Patentamt | 2022

    Freier Zugriff