Learning communication patterns for malware discovery in HTTPs data

作者: Jan Kohout , Tomáš Komárek , Přemysl Čech , Jan Bodnár , Jakub Lokoč

DOI: 10.1016/J.ESWA.2018.02.010

关键词: MalwareEncryptionProtocol (object-oriented programming)The InternetInformation retrievalRepresentation (mathematics)Computer scienceTask (computing)Process (computing)

摘要: … and representation of encrypted communication from logs of … contextual information of the encrypted requests. This helps to … for comparison with GMM-based model presented below. …

参考文章(46)
Gregory Fedynyshyn, Mooi Choo Chuah, Gang Tan, Detection and classification of different botnet C&C channels autonomic and trusted computing. pp. 228- 242 ,(2011) , 10.1007/978-3-642-23496-5_17
Martin Rehak, Michal Pechoucek, Martin Grill, Karel Bartos, Eugen Staab, Jan Stiborek, Dynamic information source selection for intrusion detection systems adaptive agents and multi-agents systems. pp. 1009- 1016 ,(2009)
Erik Hjelmvik, Wolfgang John, Statistical Protocol IDentification with SPID: Preliminary Results Swedish National Computer Networking Workshop. ,(2009)
Jan Kohout, Tomas Pevny, Automatic discovery of web servers hosting similar applications integrated network management. pp. 1310- 1315 ,(2015) , 10.1109/INM.2015.7140487
Satoshi Kondo, Naoshi Sato, Botnet Traffic Detection Techniques by C&C Session Classification Using SVM Advances in Information and Computer Security. pp. 91- 104 ,(2007) , 10.1007/978-3-540-75651-4_7
Jan Kohout, Tomas Pevny, Unsupervised detection of malware in persistent web traffic international conference on acoustics, speech, and signal processing. pp. 1757- 1761 ,(2015) , 10.1109/ICASSP.2015.7178272
Shailendra Sahu, B M Mehtre, Network intrusion detection system using J48 Decision Tree advances in computing and communications. pp. 2023- 2026 ,(2015) , 10.1109/ICACCI.2015.7275914
M. Aiello, M. Mongelli, G. Papaleo, DNS tunneling detection through statistical fingerprints of protocol messages and machine learning International Journal of Communication Systems. ,vol. 28, pp. 1987- 2002 ,(2015) , 10.1002/DAC.2836
Alice Este, Francesco Gringoli, Luca Salgarelli, Support Vector Machines for TCP traffic classification Computer Networks. ,vol. 53, pp. 2476- 2490 ,(2009) , 10.1016/J.COMNET.2009.05.003
Warren S. McCulloch, Walter Pitts, A logical calculus of the ideas immanent in nervous activity Bulletin of Mathematical Biology. ,vol. 52, pp. 99- 115 ,(1990) , 10.1007/BF02478259