Naslov
Detecting anomalous Web server usage through mining access logs

Autori
Gržinić, Toni ; Kišasondi, Tonimir ; Šaban, Josip

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
24th Central European Conference on Information and Intelligent Systems / Tihomir Hunjak, Sandra Lovrenčić, Igor Tomičić - Varaždin : Fakultet organizacije i informatike Sveučilišta u Zagrebu, 2013, 228-296

Skup
Central European Conference on Information and Intelligent Systems

Mjesto i datum
Varaždin, Hrvatska, 18.09.2013. - 20.09.2013

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
anomaly detection ; access logs ; Apache web server

Sažetak
Most operating systems services generate log files that can be used for debugging and supervision. One important function of log files is logging security related or debug information, for example logging unsuccessful authentication or error logging. This paper shows how to implement an anomaly detection process of web server’s unexpected events using the the Apache web server’s logs and applying supervised machine learning algorithms to extracted features. Also, we compare the classification performance of several algorithms that can be easily implemented in real-world scenarios.

Izvorni jezik
Engleski

Znanstvena područja
Informacijske i komunikacijske znanosti

POVEZANOST RADA