A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms

doi:10.1016/j.comcom.2008.08.009

	A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms
	Li, Yang 1,2; Guo, Li 2; Tian, Zhi-Hong 2; Lu, Tian-Bo 3
	2008-11-20
发表期刊	COMPUTER COMMUNICATIONS
ISSN	0140-3664
卷号	31 期号:17 页码:4018-4025
摘要	World Wide Web (WWW) is one of the most popular applications currently running on the Internet and web server is a crucial component for this application. However, network anomalies especially Distributed Denial-of-Service (DDoS) attacks bombard web server, degrade its Quality of Service (QoS) and even deny the legitimate users' requests. Traditional network anomaly detection methods often lead to high false positives and expensive computational cost, thus unqualified for real-time web server anomaly detection. To solve these problems, in this paper we first propose an efficient network anomaly detection method based on Transductive Confidence Machines for K-Nearest Neighbors (TCM-KNN) algorithm. Secondly, we integrate a lot of objective and efficient anomalies impact metrics from the perceptions of the end users into TCM-KNN algorithm to build a robust web sever anomaly detection mechanism. Finally, Genetic Algorithm (GA) based instance selection method is introduced to boost the real-time detection performance of our method. We evaluate our method on a series of experiments both on well-known KDD Cup 1999 dataset and concrete dataset collected from real network traffic. The results demonstrate our methods are actually effective and lightweight for real-time web server anomaly detection. (C) 2008 Elsevier B.V. All rights reserved.
关键词	Network security Web server anomaly detection TCM-KNN algorithm Genetic algorithm
DOI	10.1016/j.comcom.2008.08.009
收录类别	SCI
语种	英语
WOS研究方向	Computer Science ; Engineering ; Telecommunications
WOS类目	Computer Science, Information Systems ; Engineering, Electrical & Electronic ; Telecommunications
WOS记录号	WOS:000261362400014
出版者	ELSEVIER SCIENCE BV
引用统计	被引频次：17[WOS] [WOS记录] [WOS相关记录]
文献类型	期刊论文
条目标识符	http://119.78.100.204/handle/2XEOYT63/11358
专题	中国科学院计算技术研究所期刊论文_英文
通讯作者	Li, Yang
作者单位	1.China Mobile Res Inst, Beijing 100053, Peoples R China 2.Chinese Acad Sci, Comp Technol Inst, Beijing 100190, Peoples R China 3.Natl Comp Network Emergency Response Tech Team Co, Beijing 100029, Peoples R China
推荐引用方式 GB/T 7714	Li, Yang,Guo, Li,Tian, Zhi-Hong,et al. A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms[J]. COMPUTER COMMUNICATIONS,2008,31(17):4018-4025.
APA	Li, Yang,Guo, Li,Tian, Zhi-Hong,&Lu, Tian-Bo.(2008).A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms.COMPUTER COMMUNICATIONS,31(17),4018-4025.
MLA	Li, Yang,et al."A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms".COMPUTER COMMUNICATIONS 31.17(2008):4018-4025.