Detection of Web-based attacks through Markovian protocol parsing

@article{Tapiador2005DetectionOW,
  title={Detection of Web-based attacks through Markovian protocol parsing},
  author={Juan E. Tapiador and Pedro Garc{\'i}a-Teodoro and Jes{\'u}s E. D{\'i}az-Verdejo},
  journal={10th IEEE Symposium on Computers and Communications (ISCC'05)},
  year={2005},
  pages={457-462}
}
This paper presents a novel approach based on the monitoring of incoming HTTP requests to detect attacks against Web servers. The detection is accomplished through a Markovian model whose states and transitions between them are determined from the specification of the HTTP protocol while the probabilities of the symbols associated to the Markovian source are obtained during a training stage according to a set of attack-free requests for the target server. The experiments carried out show a high… CONTINUE READING