Intrusion detection using GSAD model for HTTP traffic on web services

Jamdagni, Aruna; Tan, Zhiyuan; Nanda, Priyadarsi; He, Xiangjian; Liu, Ren Ping

Abstract

Intrusion detection systems are widely used security tools to detect cyber-attacks and malicious activities in computer systems and networks. Hypertext Transport Protocol (HTTP) is used for new applications without much interference. In this paper, we focus on intrusion detection of HTTP traffic by applying pattern recognition techniques using our Geometrical Structure Anomaly Detection (GSAD) model. Experimental results reveal that features extracted from HTTP request using GSAD model can be used to distinguish anomalous traffic from normal traffic, and attacks carried out over HTTP traffic can be identified. We evaluate and compare our results with the results of PAYL intrusion detection systems for the test of DARPA 1999 IDS data set. The results show GSAD has high detection rates and low false positive rates.

Citation

Jamdagni, A., Tan, Z., Nanda, P., He, X., & Liu, R. P. (2010, June). Intrusion detection using GSAD model for HTTP traffic on web services. Presented at Proceedings of the 6th International Wireless Communications and Mobile Computing Conference on ZZZ - IWCMC '10

• Presentation Conference Type: Conference Paper (Published)
• Conference Name: Proceedings of the 6th International Wireless Communications and Mobile Computing Conference on ZZZ - IWCMC '10
• Start Date: Jun 28, 2010
• End Date: Jul 2, 2010
• Online Publication Date: Jun 28, 2010
• Publication Date: Jun 28, 2010
• Deposit Date: Jun 16, 2017
• Publisher: Association for Computing Machinery (ACM)
• Pages: 1193-1197
• Book Title: IWCMC '10 Proceedings of the 6th International Wireless Communications and Mobile Computing Conference
• ISBN: 9781450300629
• DOI: https://doi.org/10.1145/1815396.1815669
• Keywords: Intrusion Detection, GSAD Model, Payload, HTTP, Attack
• Public URL: http://researchrepository.napier.ac.uk/Output/948523