KMITL

Permanent URI for this communityhttps://dspace.kmitl.ac.th/handle/123456789/1

Browse

Settings

Author: search.filters.author.Threepak, ThanunchaiSubject: search.filters.subject.Anomaly Detection

Search Results

Now showing 1 - 2 of 2
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    Web attack detection using chromatography-like entropy analysis
    (2015-01-01)
    Watcharapupong, Akkradach
    ;
    Threepak, Thanunchai
    Web services are mostly attacked in various ways directly and indirectly. We calculate the Shannon entropy from web server log files, especially access logs, and then estimate the entropy distance to detect intrusions and identified them by distinct attack word lists as general, cross-site script, and SQL injection attacks. The experiment shows that our proposed chromatography-like entropy analysis method can detect and identify these behaviors.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Item,
    Anomaly SQL SELECT-statement detection using entropy analysis
    (2014-01-01)
    Threepak, Thanunchai
    ;
    Watcharapupong, Akkradach
    Database systems are often intruded because they store valuable information and can be accessed through Internet web applications which sometimes are not developed with security in mind. Attackers can inject some crafted inputs to those programs that work on database systems so that some unexpected results occur. We analyze the database system log files, focus on query statements (SQL SELECT statements), using the Shannon entropy to detect such anomaly attempts that would change conditional entropy significantly. Our experiment shows that the proposed anomaly detection using entropy analysis is effective. © 2014 Springer International Publishing Switzerland.