{"id":"https://openalex.org/W2105330688","doi":"https://doi.org/10.1145/1526709.1526897","title":"A general framework for adaptive and online detection of web attacks","display_name":"A general framework for adaptive and online detection of web attacks","publication_year":2009,"publication_date":"2009-04-20","ids":{"openalex":"https://openalex.org/W2105330688","doi":"https://doi.org/10.1145/1526709.1526897","mag":"2105330688"},"language":"en","primary_location":{"id":"doi:10.1145/1526709.1526897","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1526709.1526897","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th international conference on World wide web","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100392263","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0003-3240-1485"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Project AxIS, INRIA Sophia Antipolis, Sophia Antipolis, France"],"affiliations":[{"raw_affiliation_string":"Project AxIS, INRIA Sophia Antipolis, Sophia Antipolis, France","institution_ids":["https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045185842","display_name":"Florent Mass\u00e9glia","orcid":"https://orcid.org/0000-0002-1149-585X"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Florent Masseglia","raw_affiliation_strings":["Project AxIS, INRIA Sophia Antipolis, Sophia Antipolis, France"],"affiliations":[{"raw_affiliation_string":"Project AxIS, INRIA Sophia Antipolis, Sophia Antipolis, France","institution_ids":["https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087622984","display_name":"Thomas Guyet","orcid":"https://orcid.org/0000-0002-4909-5843"},"institutions":[{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Thomas Guyet","raw_affiliation_strings":["Projet DREAM, IRISA, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Projet DREAM, IRISA, Rennes, France","institution_ids":["https://openalex.org/I2802519937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089260382","display_name":"Ren\u00e9 Quiniou","orcid":null},"institutions":[{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Rene Quiniou","raw_affiliation_strings":["Projet DREAM, IRISA, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Projet DREAM, IRISA, Rennes, France","institution_ids":["https://openalex.org/I2802519937"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108094257","display_name":"Marie-Odile Cordier","orcid":null},"institutions":[{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Marie-Odile Cordier","raw_affiliation_strings":["Projet DREAM, IRISA, Rennes, France"],"affiliations":[{"raw_affiliation_string":"Projet DREAM, IRISA, Rennes, France","institution_ids":["https://openalex.org/I2802519937"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100392263"],"corresponding_institution_ids":["https://openalex.org/I1326498283"],"apc_list":null,"apc_paid":null,"fwci":1.4486,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.83597126,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1141","last_page":"1142"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8495816588401794},{"id":"https://openalex.org/keywords/streaming-data","display_name":"Streaming data","score":0.6825852990150452},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6599085330963135},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.6006681323051453},{"id":"https://openalex.org/keywords/dbscan","display_name":"DBSCAN","score":0.5971754789352417},{"id":"https://openalex.org/keywords/data-stream-mining","display_name":"Data stream mining","score":0.5147507190704346},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.505029022693634},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.34528830647468567},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.21054840087890625},{"id":"https://openalex.org/keywords/fuzzy-clustering","display_name":"Fuzzy clustering","score":0.10616621375083923}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8495816588401794},{"id":"https://openalex.org/C2777611316","wikidata":"https://www.wikidata.org/wiki/Q39045282","display_name":"Streaming data","level":2,"score":0.6825852990150452},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6599085330963135},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.6006681323051453},{"id":"https://openalex.org/C46576248","wikidata":"https://www.wikidata.org/wiki/Q1114630","display_name":"DBSCAN","level":5,"score":0.5971754789352417},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.5147507190704346},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.505029022693634},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.34528830647468567},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.21054840087890625},{"id":"https://openalex.org/C17212007","wikidata":"https://www.wikidata.org/wiki/Q5511111","display_name":"Fuzzy clustering","level":3,"score":0.10616621375083923},{"id":"https://openalex.org/C104047586","wikidata":"https://www.wikidata.org/wiki/Q5033439","display_name":"Canopy clustering algorithm","level":4,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1526709.1526897","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1526709.1526897","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th international conference on World wide web","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.469.9852","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.469.9852","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://people.irisa.fr/Thomas.Guyet/publis/ARCo2009_Guyet.pdf","raw_type":"text"},{"id":"pmh:oai:HAL:inria-00461391v1","is_oa":false,"landing_page_url":"https://inria.hal.science/inria-00461391","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"18th International World Wide Web Conference - WWW 2009, Apr 2009, Madrid, Spain","raw_type":"Conference papers"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W172773819","https://openalex.org/W1601009504","https://openalex.org/W1673310716"],"related_works":["https://openalex.org/W3176449234","https://openalex.org/W4281572076","https://openalex.org/W2469699777","https://openalex.org/W2060628068","https://openalex.org/W2773951400","https://openalex.org/W3013371665","https://openalex.org/W4391093024","https://openalex.org/W3208495060","https://openalex.org/W2277307313","https://openalex.org/W2235038291"],"abstract_inverted_index":{"Detection":[0],"of":[1,27,107,115],"web":[2,28,59,92],"attacks":[3,103],"is":[4,48,124],"an":[5],"important":[6],"issue":[7],"in":[8,58,121],"current":[9],"defense-in-depth":[10],"security":[11],"framework.":[12,81],"In":[13],"this":[14],"paper,":[15],"we":[16,65],"propose":[17],"a":[18],"novel":[19],"general":[20,31],"framework":[21,32,47,88,129],"for":[22],"adaptive":[23],"and":[24,53,95,130],"online":[25,38,52],"detection":[26,42,83],"attacks.":[29],"The":[30,82,133],"can":[33],"be":[34],"based":[35,44,85],"on":[36,45,86],"any":[37],"clustering":[39,106],"methods.":[40],"A":[41,111],"model":[43,84],"the":[46,80,87,91,108,128,131],"able":[49],"to":[50,68,78,97,126],"learn":[51],"deal":[54],"with":[55],"\"concept":[56],"drift\"":[57],"audit":[60,93],"data":[61,70,94,119],"streams.":[62],"Str-DBSCAN":[63],"that":[64],"extended":[66],"DBSCAN":[67],"streaming":[69,109],"as":[71,73],"well":[72],"StrAP":[74],"are":[75],"both":[76],"used":[77,125],"validate":[79,127],"automatically":[89],"labels":[90],"adapts":[96],"normal":[98],"behavior":[99],"changes":[100],"while":[101],"identifies":[102],"through":[104],"dynamical":[105],"data.":[110],"very":[112],"large":[113],"size":[114],"real":[116],"HTTP":[117],"Log":[118],"collected":[120],"our":[122],"institute":[123],"model.":[132],"preliminary":[134],"testing":[135],"results":[136],"demonstrated":[137],"its":[138],"effectiveness.":[139]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}