在Web服务器日志中对异常用户活动的全面分析和评估
Lenka Benova1, Ladislav Hudec1
1Faculty of Informatics and Information Technologies, Slovak University of Technology in Bratislava, 842 16 Bratislava, Slovakia.
Sensors (Basel, Switzerland)
|February 10, 2024
概括
本研究介绍了一种用于检测Web服务器异常的机器学习框架,将隔离森林和专家分析结合起来,以识别和分类NGINX日志中的用户活动,以增强网络安全.
科学领域:
- 网络安全 网络安全
- 机器学习 机器学习
- 网络安全 网络安全
背景情况:
- 传统的Web服务器异常检测方法与庞大的数据集和微妙的异常作斗争.
- 分析个人用户活动对于有效的网络安全至关重要.
- NGINX 服务器日志包含有价值的数据,用于识别可疑行为.
研究的目的:
- 开发一个新的机器学习框架,用于Web服务器异常检测.
- 提高识别恶意用户活动的准确性和效率.
- 将算法分析与专家人类评估相结合,以实现强大的安全性.
主要方法:
- 将隔离森林算法应用于NGINX服务器日志以检测异常用户行为.
- 利用DBSCAN集群来根据请求模式对异常进行分类.
- 纳入网络安全专业人员进行的集群后专家分析以进行验证.
主要成果:
- 成功识别了微妙的异常和异常用户行为,常常被传统方法遗漏.
- 有效地分类异常,区分良性和潜在有害活动.
- 启用了针对性的安全响应,如访问限制和配置调整.
结论:
- 综合框架显著提升了Web服务器异常检测能力.
- 将机器学习与专家见解相结合,为网络安全提供了一个细微的方法.
- 为了有效地保护Web服务器基础设施,一个多方面的战略是必不可少的.
更多相关视频
08:53Integrating Computerized Linguistic and Social Network Analyses to Capture Addiction Recovery Capital in an Online Community
Published on: May 31, 2019
5.2K
13:44Project-Based Learning Guidelines for Health Sciences Students: An Analysis with Data Mining and Qualitative Techniques
Published on: December 9, 2022
3.5K
相关概念视频
Unusual Results
3.2K
Unusual results are those that have a very low chance of occurring. Unusual results can be identified using probabilities and the range rule of thumb. In problems involving probability, unusual results can be observed in 2 instances – an unusually high number of successes or an unusually low number of successes.
According to the range rule of thumb, any value above or below two standard deviations, 2σ from the mean, μ is considered unusual.
Maximum unusual value =...
According to the range rule of thumb, any value above or below two standard deviations, 2σ from the mean, μ is considered unusual.
Maximum unusual value =...
3.2K
Statistical Methods to Analyze Parametric Data: ANOVA
372
Analysis of Variance, or ANOVA, is a powerful statistical technique used to analyze parametric data, primarily in research and experimental studies. It's designed to compare the means of two or more groups, assisting researchers in identifying any significant differences between these group means. There are two main types of ANOVA based on the complexity of the analysis: one-way and two-way.
One-way ANOVA is applied when a single independent variable or factor is scrutinized. It compares...
One-way ANOVA is applied when a single independent variable or factor is scrutinized. It compares...
372
Interpreting Run Charts
101
Run charts, essentially line graphs plotted over time, serve as fundamental yet effective tools for process analysis. They chronicle data sequentially, facilitating the identification of trends, shifts, or cyclical movements. This graphical representation is instrumental in determining whether a process is stable or exhibits signs of potential instability indicative of special cause variation. In the healthcare domain, run charts depict infection rates over time, enabling hospitals to monitor...
101
What is an ANOVA?
7.9K
The Analysis of Variance or ANOVA is a statistical test developed by Ronald Fisher in 1918. It is performed on three or more samples to check for equality between their means.
Before performing ANOVA, one must ensure that the samples used for this analysis have three crucial characteristics or statistical assumptions. The first assumption states that the samples should be drawn from normally distributed samples, while the second requires that all the drawn samples should be randomly and...
Before performing ANOVA, one must ensure that the samples used for this analysis have three crucial characteristics or statistical assumptions. The first assumption states that the samples should be drawn from normally distributed samples, while the second requires that all the drawn samples should be randomly and...
7.9K
What is ANOVA?
1.9K
The Analysis of Variance or ANOVA is a statistical test developed by Ronald Fisher in 1918. It is performed on three or more samples to check for equality between their means.
Before performing ANOVA, one must ensure that the samples used for this analysis have three crucial characteristics or statistical assumptions. The first assumption states that the samples should be drawn from normally distributed samples, while the second requires that all the drawn samples be randomly and independently...
Before performing ANOVA, one must ensure that the samples used for this analysis have three crucial characteristics or statistical assumptions. The first assumption states that the samples should be drawn from normally distributed samples, while the second requires that all the drawn samples be randomly and independently...
1.9K
One-Way ANOVA
7.9K
One-way ANOVA analyzes more than three samples categorized by one factor. For example, it can compare the average mileage of sports bikes. Here, the data is categorized by one factor - the company. However, one-way ANOVA cannot be used to simultaneously compare the sample mean of three or more samples categorized by two factors. An example of two factors would be sports bikes from different companies driven in different terrains, such as a desert or snowy landscape. Here, two-way ANOVA is used...
7.9K
