Detection of Server-side Web Attacks
Igino Corona, Giorgio Giacinto · UNICA IRIS Institutional Research Information System (University of Cagliari) · 2010
Web servers and server-side applications constitute the key components of modern Internet services. We present a pattern recognition system to the detection of intrusion attempts that target such components. Our system is anomaly-based, i.e., we model the normal (legitimate) trac and intrusion attempts are identied as anomalous trac. In order to address the presence of attacks (noise) inside the training set we employ an ad-hoc outlier detection technique. This approach does not require supervision and allows us to accurately detect both known and unknown attacks against web services.