{"id":"https://openalex.org/W2793171130","doi":"https://doi.org/10.1145/3171592.3171594","title":"Anomaly-Based Web Attack Detection","display_name":"Anomaly-Based Web Attack Detection","publication_year":2017,"publication_date":"2017-12-08","ids":{"openalex":"https://openalex.org/W2793171130","doi":"https://doi.org/10.1145/3171592.3171594","mag":"2793171130"},"language":"en","primary_location":{"id":"doi:10.1145/3171592.3171594","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3171592.3171594","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 VI International Conference on Network, Communication and Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084222453","display_name":"Jingxi Liang","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jingxi Liang","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101405285","display_name":"Wen Zhao","orcid":"https://orcid.org/0000-0002-5760-4759"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wen Zhao","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101538186","display_name":"Wei Ye","orcid":"https://orcid.org/0000-0002-9331-4716"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Ye","raw_affiliation_strings":["Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5084222453"],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":5.0305,"has_fulltext":false,"cited_by_count":68,"citation_normalized_percentile":{"value":0.95960807,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"80","last_page":"85"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.807402491569519},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.7506527304649353},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7137838006019592},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.600894570350647},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5317125916481018},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5207059979438782},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4626861810684204},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.45834657549858093},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4457969665527344},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.44180071353912354},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.429882287979126},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3629268705844879},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.35635873675346375},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.14704778790473938}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.807402491569519},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.7506527304649353},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7137838006019592},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.600894570350647},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5317125916481018},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5207059979438782},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4626861810684204},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45834657549858093},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4457969665527344},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.44180071353912354},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.429882287979126},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3629268705844879},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35635873675346375},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.14704778790473938},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3171592.3171594","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3171592.3171594","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 VI International Conference on Network, Communication and Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.7099999785423279,"display_name":"Reduced inequalities"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320324787","display_name":"Peking University","ror":"https://ror.org/02v51f717"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1560130852","https://openalex.org/W1779735989","https://openalex.org/W1924770834","https://openalex.org/W1985987493","https://openalex.org/W2064675550","https://openalex.org/W2069143585","https://openalex.org/W2103378897","https://openalex.org/W2125507907","https://openalex.org/W2126862902","https://openalex.org/W2140679639","https://openalex.org/W2172140247","https://openalex.org/W2605244007","https://openalex.org/W2998704965","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W3210364259","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4300558037","https://openalex.org/W4377864969","https://openalex.org/W3030345572"],"abstract_inverted_index":{"As":[0,32],"the":[1,21,51,61,101,112,131,136,153,162,173,180,184],"era":[2],"of":[3,58,133,175],"cloud":[4],"technology":[5],"arises,":[6],"more":[7,9,39],"and":[8,17,56,71,121,142,152],"people":[10],"are":[11],"beginning":[12],"to":[13,20,75,85,92,110,138,172],"migrate":[14],"their":[15],"applications":[16,26,36],"personal":[18],"data":[19],"cloud.":[22],"This":[23],"makes":[24],"web-based":[25,35],"an":[27],"attractive":[28],"target":[29],"for":[30],"cyber-attacks.":[31],"a":[33,80,125],"result,":[34],"now":[37],"need":[38],"protections":[40],"than":[41],"ever.":[42],"However,":[43],"current":[44],"anomaly-based":[45,189],"web":[46,63,190],"attack":[47,64,191],"detection":[48,65,192],"approaches":[49],"face":[50],"difficulties":[52],"like":[53],"unsatisfying":[54],"accuracy":[55],"lack":[57],"generalization.":[59],"And":[60],"rule-based":[62],"can":[66],"hardly":[67],"fight":[68],"unknown":[69],"attacks":[70],"is":[72,91,179,186],"relatively":[73],"easy":[74],"bypass.":[76],"Therefore,":[77],"we":[78],"propose":[79],"novel":[81],"deep":[82],"learning":[83],"approach":[84,90,165],"detect":[86],"anomalous":[87,141],"requests.":[88,144],"Our":[89,164],"first":[93,181],"train":[94,124],"two":[95,150],"Recurrent":[96],"Neural":[97],"Networks":[98],"(RNNs)":[99],"with":[100,161],"complicated":[102],"recurrent":[103],"unit":[104,106],"(LSTM":[105],"or":[107],"GRU":[108],"unit)":[109],"learn":[111],"normal":[113,118,143],"request":[114],"patterns":[115],"using":[116],"only":[117],"requests":[119],"unsupervisedly":[120],"then":[122],"supervisedly":[123],"neural":[126],"network":[127],"classifier":[128],"which":[129],"takes":[130],"output":[132],"RNNs":[134],"as":[135],"input":[137],"discriminate":[139],"between":[140],"We":[145],"tested":[146],"our":[147,157,176],"model":[148,158],"on":[149,188],"datasets":[151],"results":[154],"showed":[155],"that":[156,183],"was":[159],"competitive":[160],"state-of-the-art.":[163],"frees":[166],"us":[167],"from":[168],"feature":[169],"selection.":[170],"Also":[171],"best":[174],"knowledge,":[177],"this":[178],"time":[182],"RNN":[185],"applied":[187],"systems.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":15},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":2}],"updated_date":"2026-03-13T16:22:10.518609","created_date":"2025-10-10T00:00:00"}