Title
Malicious behaviour classification in web logs based on an improved Xgboost algorithm.
Abstract
Attacks against web servers are one of the most serious threats in security fields. Attackers are able to make the computer systems more vulnerable. Analysing the web logs is one of the most effective methods to identify malicious behaviours. In this study, we consider the analysis of HTTP requests in web logs to classify malicious behaviour into multiple categories. At present, web attacks are so complex that single layer classification model is unable to deal with the emerging attacks, in particular, there is a limitation that category features cannot be added to single layer model. Motivated by this, we propose an improved Xgboost algorithm, which uses the method of constructing candidate attacks to attain higher accuracy for malicious behaviour detection. The experimental results show that, compared to other machine learning algorithms, the improved Xgboost algorithm we proposed performs better. Besides, after extracting the important features, it not only does not affect the effectiveness of the algo...
Year
DOI
Venue
2018
10.1504/IJWET.2018.097560
Int. J. Web Eng. Technol.
Field
DocType
Volume
Data mining,Computer science,Web engineering,Algorithm,Web server
Journal
13
Issue
Citations 
PageRank 
4
0
0.34
References 
Authors
0
4
Name
Order
Citations
PageRank
Jiaming Song110023.21
Xiao-Juan Wang2228.34
Lei Jin3246.98
Jingwen You400.68