Detecting hostile accesses to a web site using a visualization method based on probabilistic clustering

  • Authors:
  • Naoko Hirose;Einoshin Suzuki

  • Affiliations:
  • Electrical and Computer Engineering, Yokohama National University, Yokohama, Japan;Electrical and Computer Engineering, Yokohama National University, Yokohama, Japan

  • Venue:
  • SMO'05 Proceedings of the 5th WSEAS international conference on Simulation, modelling and optimization
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we propose a visualization method based on probabilistic clustering in order to detect hostile accesses to a Web site. A system administrator is required to monitor a huge amount of access log data in order to detect novel types of hostile accesses. Our PrototypeLines is a visualization method based on probabilistic clustering with a single parameter that must be tuned and has been successful in medical domain. Thus we believe that PrototypeLines is more attractive than conventional hostile access detection methods based on machine learning since each of the latter methods typically has many parameters that must be tuned. We modify our PrototypeLines for hostile access detection and investigate its performance by experiments with real data. Experimental results show that our method is effective in detecting hostile accesses since it provides a display of a large amount of access sessions in a compact manner emphasizing hostile accesses with warm colors.