{"id":"https://openalex.org/W4378531159","doi":"https://doi.org/10.1145/3590777.3590788","title":"HTTP Cyberattacks Detection through Automatic Signature Generation in multi-site IoT Deployments","display_name":"HTTP Cyberattacks Detection through Automatic Signature Generation in multi-site IoT Deployments","publication_year":2023,"publication_date":"2023-05-27","ids":{"openalex":"https://openalex.org/W4378531159","doi":"https://doi.org/10.1145/3590777.3590788"},"language":"en","primary_location":{"id":"doi:10.1145/3590777.3590788","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3590777.3590788","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"European Interdisciplinary Cybersecurity Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044074920","display_name":"Agust\u00edn Lara","orcid":"https://orcid.org/0000-0003-4809-5654"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Agust\u00edn Walabonso Lara Romero","raw_affiliation_strings":["Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain"],"raw_orcid":"https://orcid.org/0000-0003-4809-5654","affiliations":[{"raw_affiliation_string":"Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000831832","display_name":"Juan Antonio Ternero Mu\u00f1iz","orcid":"https://orcid.org/0000-0003-3007-7570"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Antonio Ternero Mu\u00f1iz","raw_affiliation_strings":["Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain"],"raw_orcid":"https://orcid.org/0000-0003-3007-7570","affiliations":[{"raw_affiliation_string":"Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051920060","display_name":"Rafael Estepa","orcid":"https://orcid.org/0000-0001-8505-1920"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael Estepa Alonso","raw_affiliation_strings":["Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain"],"raw_orcid":"https://orcid.org/0000-0001-8505-1920","affiliations":[{"raw_affiliation_string":"Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015226343","display_name":"Antonio Estepa","orcid":"https://orcid.org/0000-0003-1841-3973"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Antonio Estepa Alonso","raw_affiliation_strings":["Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain"],"raw_orcid":"https://orcid.org/0000-0003-1841-3973","affiliations":[{"raw_affiliation_string":"Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018170565","display_name":"Fernando Robles","orcid":"https://orcid.org/0009-0003-2848-2136"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Fernando Ruiz Robles","raw_affiliation_strings":["Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain"],"raw_orcid":"https://orcid.org/0009-0003-2848-2136","affiliations":[{"raw_affiliation_string":"Escuela T\u00e9cnica Superior de Ingenier\u00eda. Dept. Ingenier\u00eda Telem\u00e1tica, University of Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071465643","display_name":"Jes\u00fas E. D\u0131\u0301az-Verdejo","orcid":"https://orcid.org/0000-0002-8424-9932"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jes\u00fas D\u00edaz-Verdejo","raw_affiliation_strings":["E.T.S. de Ingenier\u00edas Inform\u00e1tica y de Telecomunicaci\u00f3n.Departamento de Teor\u00eda de la Se\u00f1al, Telem\u00e1tica y Comunicaciones, University of Granada, Spain"],"raw_orcid":"https://orcid.org/0000-0002-8424-9932","affiliations":[{"raw_affiliation_string":"E.T.S. de Ingenier\u00edas Inform\u00e1tica y de Telecomunicaci\u00f3n.Departamento de Teor\u00eda de la Se\u00f1al, Telem\u00e1tica y Comunicaciones, University of Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"65","last_page":"70"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7872911691665649},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7509986758232117},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.7423815727233887},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6733301281929016},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.659080982208252},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.6008653044700623},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5163673162460327},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.45792871713638306},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4396930932998657},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.42478641867637634},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.42284953594207764},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3821302056312561},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3462209105491638},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.30970510840415955},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2893807291984558},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2331485152244568},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13049966096878052}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7872911691665649},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7509986758232117},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.7423815727233887},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6733301281929016},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.659080982208252},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.6008653044700623},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5163673162460327},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.45792871713638306},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4396930932998657},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.42478641867637634},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.42284953594207764},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3821302056312561},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3462209105491638},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30970510840415955},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2893807291984558},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2331485152244568},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13049966096878052},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3590777.3590788","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3590777.3590788","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"European Interdisciplinary Cybersecurity Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1546047689","https://openalex.org/W1756225116","https://openalex.org/W2108118522","https://openalex.org/W2278186031","https://openalex.org/W2883701651","https://openalex.org/W2945884086","https://openalex.org/W3009412409","https://openalex.org/W3011610465","https://openalex.org/W3135091917","https://openalex.org/W4205519045","https://openalex.org/W4307907319"],"related_works":["https://openalex.org/W2337148208","https://openalex.org/W3004832009","https://openalex.org/W1971929717","https://openalex.org/W3036013726","https://openalex.org/W1724519426","https://openalex.org/W2351051591","https://openalex.org/W2369534771","https://openalex.org/W4214835788","https://openalex.org/W2357468538","https://openalex.org/W1548126107"],"abstract_inverted_index":{"IoT":[0,91],"deployments":[1,99],"often":[2],"include":[3],"a":[4,52,63,79,85,107],"web-interface":[5],"server":[6],"for":[7,54],"managerial":[8],"purposes.":[9],"Signature-based":[10],"Intrusion":[11],"Detection":[12],"Systems":[13],"are":[14,73,117],"commonly":[15],"used":[16,29],"to":[17,75,112,119,127],"detect":[18],"HTTP":[19,60],"attacks":[20,43,61],"on":[21,89],"these":[22,31],"web":[23],"servers.":[24],"The":[25,70],"standard":[26,121],"signature":[27],"repositories":[28],"by":[30],"defensive":[32],"systems":[33],"can":[34],"be":[35],"enhanced":[36],"with":[37,45],"new":[38],"signatures":[39,58,71,116],"generated":[40,72],"automatically":[41],"from":[42,59,100],"detected":[44],"anomaly":[46],"detection":[47],"techniques.":[48],"This":[49],"work":[50],"presents":[51],"scheme":[53],"generating":[55],"such":[56],"anomaly-based":[57,115],"in":[62,78],"way":[64],"that":[65],"avoids":[66],"excessive":[67],"false":[68],"positives.":[69],"distributed":[74,126],"peer":[76],"sites":[77],"multi-site":[80],"environment.":[81],"We":[82],"also":[83],"present":[84],"case":[86],"study":[87],"based":[88],"an":[90],"real-life":[92],"dataset":[93],"collected":[94],"at":[95],"four":[96],"different":[97],"SmartLight":[98],"the":[101,120,128],"same":[102],"organization.":[103],"Our":[104],"results":[105],"show":[106],"notable":[108],"performance":[109],"improvement":[110],"(from":[111],")":[113],"when":[114],"added":[118],"default":[122],"Snort":[123],"ruleset":[124],"and":[125],"other":[129],"three":[130],"sites.":[131]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}