Research on Application Level Anomaly Detection
Wang Yu · 2009
Most of the network anomaly detection approaches are based on packet header fields,while the payload is usually discarded,namely they detect network attacks only from network layer and transport layer.Unfortunately,most of today's attacks happen on the application level,so the research of the application level anomaly detection is very important.We first introduced the current status of intrusion detection and network anomaly detection,and emphasized the importance of the application level anomaly detection.Then we introduced the main approaches of the application level anomaly detection in detail.Finally we discussed the challenges of the application level anomaly detection.