{"id":"https://openalex.org/W2944309854","doi":"https://doi.org/10.1109/ants.2018.8710080","title":"Statistical Profiling of n-grams for Payload Based Anomaly Detection for HTTP Web Traffic","display_name":"Statistical Profiling of n-grams for Payload Based Anomaly Detection for HTTP Web Traffic","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2944309854","doi":"https://doi.org/10.1109/ants.2018.8710080","mag":"2944309854"},"language":"en","primary_location":{"id":"doi:10.1109/ants.2018.8710080","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ants.2018.8710080","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101446368","display_name":"Rajarshi Pal","orcid":"https://orcid.org/0000-0002-5608-7024"},"institutions":[{"id":"https://openalex.org/I150312865","display_name":"Institute for Development and Research in Banking Technology","ror":"https://ror.org/00ta0g865","country_code":"IN","type":"government","lineage":["https://openalex.org/I150312865"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rajarshi Pal","raw_affiliation_strings":["Institute for Development and Research in Banking Technology (IDRBT), Hyderabad, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Development and Research in Banking Technology (IDRBT), Hyderabad, India","institution_ids":["https://openalex.org/I150312865"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047517252","display_name":"N.Mownika Chowdary","orcid":null},"institutions":[{"id":"https://openalex.org/I36893310","display_name":"University of Hyderabad","ror":"https://ror.org/04a7rxb17","country_code":"IN","type":"education","lineage":["https://openalex.org/I36893310"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Naveen Chowdary","raw_affiliation_strings":["School of Computer and Information Sciences, University of Hyderabad, Hyderabad, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer and Information Sciences, University of Hyderabad, Hyderabad, India","institution_ids":["https://openalex.org/I36893310"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2262,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.47217873,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7621530890464783},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6269890666007996},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6084659099578857},{"id":"https://openalex.org/keywords/gram","display_name":"Gram","score":0.5875847339630127},{"id":"https://openalex.org/keywords/n-gram","display_name":"n-gram","score":0.5532971620559692},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5491684079170227},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5246360898017883},{"id":"https://openalex.org/keywords/standard-deviation","display_name":"Standard deviation","score":0.49758103489875793},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4327843189239502},{"id":"https://openalex.org/keywords/web-traffic","display_name":"Web traffic","score":0.42387253046035767},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.4223945736885071},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.3236357569694519},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.26211097836494446},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.20783314108848572},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.15896517038345337},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.10948315262794495},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.10902753472328186}],"concepts":[{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7621530890464783},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6269890666007996},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6084659099578857},{"id":"https://openalex.org/C161369605","wikidata":"https://www.wikidata.org/wiki/Q41803","display_name":"Gram","level":3,"score":0.5875847339630127},{"id":"https://openalex.org/C117884012","wikidata":"https://www.wikidata.org/wiki/Q94489","display_name":"n-gram","level":3,"score":0.5532971620559692},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5491684079170227},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5246360898017883},{"id":"https://openalex.org/C22679943","wikidata":"https://www.wikidata.org/wiki/Q159375","display_name":"Standard deviation","level":2,"score":0.49758103489875793},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4327843189239502},{"id":"https://openalex.org/C2777672014","wikidata":"https://www.wikidata.org/wiki/Q1172573","display_name":"Web traffic","level":3,"score":0.42387253046035767},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.4223945736885071},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.3236357569694519},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.26211097836494446},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.20783314108848572},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.15896517038345337},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.10948315262794495},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.10902753472328186},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C523546767","wikidata":"https://www.wikidata.org/wiki/Q10876","display_name":"Bacteria","level":2,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ants.2018.8710080","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ants.2018.8710080","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W1594536929","https://openalex.org/W1674877186","https://openalex.org/W2003231840","https://openalex.org/W2036825767","https://openalex.org/W2116065364","https://openalex.org/W2121035740","https://openalex.org/W2248500462","https://openalex.org/W2342408547","https://openalex.org/W2501244995","https://openalex.org/W2535968152","https://openalex.org/W2544774554","https://openalex.org/W2732495978","https://openalex.org/W2749325235","https://openalex.org/W6637096788"],"related_works":["https://openalex.org/W2906970013","https://openalex.org/W3126081632","https://openalex.org/W2625039379","https://openalex.org/W2088254117","https://openalex.org/W4391592887","https://openalex.org/W4254593385","https://openalex.org/W2790582133","https://openalex.org/W1901380241","https://openalex.org/W4247016990","https://openalex.org/W2789473152"],"abstract_inverted_index":{"Anomalous":[0],"HTTP":[1,11,38,72,158,197],"traffic":[2,159,198],"can":[3],"be":[4],"identified":[5],"by":[6],"analysing":[7],"the":[8,41,48,50,53,75,84,93,100,112,115,122,135,143,146,161,164,172],"content":[9],"of":[10,55,57,62,68,86,88,102,104,106,117,119,121,134,139,142,152,163,195],"packet":[12,174],"as":[13,187],"payload.":[14],"n-gram":[15,29,90,94,110,123,153,192],"analysis":[16],"is":[17,95,127,160,178],"a":[18,27,60,65,81,156],"prominent":[19],"technique":[20,183],"for":[21,37,64,77,129,155,171],"payload":[22],"analysis.":[23],"In":[24,80],"this":[25,78,140],"paper,":[26],"novel":[28],"based":[30,193],"anomaly":[31,132],"detection":[32],"method":[33,194],"has":[34],"been":[35],"proposed":[36,165],"traffic.":[39],"During":[40],"training":[42,125],"phase,":[43],"statistical":[44,147],"profiling":[45],"(the":[46],"maximum,":[47],"minimum,":[49],"median":[51,113],"and":[52],"average":[54],"number":[56,85,103,118],"occurrences":[58,87,105,120,154],"in":[59,124],"packet)":[61],"n-grams":[63],"data":[66],"set":[67],"normal":[69,157],"(not":[70],"malicious)":[71],"packets":[73,126],"provides":[74],"basis":[76],"work.":[79],"test":[82,136,173],"packet,":[83],"an":[89,108,131,168,190],"decides":[91],"whether":[92,176],"anomalous":[96,109,196],"or":[97,150,180],"not.":[98],"Moreover,":[99],"deviation":[101,144],"such":[107],"from":[111,145],"(or":[114],"average)":[116,151],"considered":[128],"estimating":[130],"score":[133],"packet.":[137],"Consideration":[138],"magnitude":[141],"profile":[148],"(median":[149],"highlight":[162],"method.":[166],"Finally,":[167],"anomaly-to-normal":[169],"ratio":[170],"determines":[175],"it":[177],"malicious":[179],"normal.":[181],"This":[182],"yields":[184],"better":[185],"performance":[186],"compared":[188],"to":[189],"existing":[191],"detection.":[199]},"counts_by_year":[{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}