Cardiff University | Prifysgol Caerdydd ORCA
Online Research @ Cardiff 
WelshClear Cookie - decide language by browser settings

BLATTA: early exploit setection on network traffic with recurrent neural networks

Pratomo, Baskoro, Burnap, Peter and Theodorakopoulos, Georgios 2020. BLATTA: early exploit setection on network traffic with recurrent neural networks. Security and Communication Networks , 8826038. 10.1155/2020/8826038

[img]
Preview
PDF - Accepted Post-Print Version
Available under License Creative Commons Attribution Non-commercial.

Download (1MB) | Preview

Abstract

Detecting exploits is crucial since the effect of undetected ones can be devastating. Identifying their presence on the network allows us to respond and block their malicious payload before they cause damage to the system. Inspecting the payload of network traffic may offer better performance in detecting exploits as they tend to hide their presence and behave similarly to legitimate traffic. Previous works on deep packet inspection for detecting malicious traffic regularly read the full length of application layer messages. As the length varies, longer messages will take more time to analyse, during which time the attack creates a disruptive impact on the system. Hence, we propose a novel early exploit detection mechanism that scans network traffic, reading only 35.21% of application layer messages to predict malicious traffic while retaining 97.57% detection rate, and a 1.93% false positive rate. Our recurrent neural network (RNN)-based model is the first work to our knowledge that provides early prediction of malicious application layer messages, thus detecting a potential attack earlier than other state-of-the-art approaches, and enabling a form of early warning system.

Item Type: Article
Status: In Press
Schools: Computer Science & Informatics
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Q Science > QA Mathematics > QA76 Computer software
Publisher: Wiley
ISSN: 1939-0114
Date of First Compliant Deposit: 2 July 2020
Date of Acceptance: 29 June 2020
Last Modified: 03 Jul 2020 16:19
URI: http://orca.cf.ac.uk/id/eprint/132917

Actions (repository staff only)

Edit Item Edit Item

Downloads

Downloads per month over past year

View more statistics