Ariu - Workshop on Applications of Pattern Analysis 2010 - Poster
1
!!!" "# $#%$&’($ )* +,, -% .%$/ 0) 1%%)2-10$ 1 34)’1’-(-05 0) $126 %$7.$#2$ -# # 8 9) )’01-# 1# ):$41(( 34)’1’-(-05 *)4 06$ 315()1/; 06$ 1:$41<$ )* 34)’1’-(-=$% $&->$/ ’5 $126 +,, -% 21(2.(10$/8 Group R A P Pattern Recognition and Applications Group http://prag.diee.unica.it HMMPayl: an application of HMM to the analysis of the HTTP payload University of Cagliari - Italy Davide Ariu - Giorgio Giacinto [davide.ariu - giacinto]@diee.unica.it $ " &’()*+, -./.01(’ 2(3 4()56/.3 #.0637/, 96$ /3*871(’*+ 1334)126 0) !’/3697(’ -./.01(’ 4$(-$% )# %5%0$&% ’1%$/ )# 1 /101’1%$ )* 97:’*/63.9 0610 /$%24-’$ ;’(<’ 1>12?%8 =3(>+.)? ’[email protected]..’A>.2(3. @0610 -% 6’;’(<’A 1>12?% 21# #)0 ’$ /$0$20$/BBB 4(6’/.3).*963.? 1#)&1(5 ’1%$/ CDE 24$10$ 1 %01=%=21( &)/$( )* 06$ ($<-=&10$ 31>$4#%8 "#5 31>$4# F6)%$ %01=%=21( &)/$( /$:-10$% *4)& 0610 %0)4$/ -# 06$ %5%0$& -% (1’$($/ 1% 1# 1>12?%8 B.3(A8*,9 *C*0;9 0*’ >. 8./.0/.8DDD E " FGG=*,+ ? *’ *’()*+, >*9.8 !’/3697(’ -./.01(’ #,9/.) H$ IJ KL LH JK H$ IJ KL IJ KL LH KL LH JK M"IE M"H$ M"IL FGG$ FGGN FGGE M"II M"IO M"IK G4# =3(>*>7+7/, )4 4+*99 P*>.+ !" G-:$# 1# +99H 315()1/88 !!" 881 %(-/-#< F-#/)F )* F-/06 ’ 4.#% ):$4 06$ 315()1/ 1#/ $I04120% 1 %$0 )* %$7.$#2$% # @’JK -# 06-% $I1&3($A !Q" 96$ 315()1/L% 34)’1’-(-=$% )’01-#$/ 10 06$ 34$:-).% %0$3 14$ 2)&’-#$/ 0) )’01-# 1# ):$41(( 34)’1’-(-05 )4 1 2(1%% (1’$( !"#$%&# ($)*%*+,+-. /001 L " RS5.37).’/*+ T.96+/9 23+4 $#4#%$53 6%4 4()74)$#8 *. -3# !9-)7):)94 ;#&+)7 )< =%$8+7+% -3$)9&3 % &$%7- >7%75#8 6+-3 -3# ?=%$8+7+% @A B=C DEEFGDE1H? <9784 %78 ($)"+8#8 %55)$8+7& -) -3# IJ;J FKDEEFJ RUTV=R&W UW!VW TR=UXP!4 VY !Z&P[ &UZVWVGVU# TR\!VW VY #&T-!W!& Dept. of Electrical and Electronic Engineering N " FZZ= =*,+(*8 &’*+,979 " 9/*1910*+ )(8.+ )* 06$ >,/.9] 879/37>61(’ F-06-# 06$ FZZ= 5*,+(*8 )* 06$ 3.^6.9/9 4$2$-:$/ ’5 1 <.> [email protected] &-<60 1(()F 0) 8./.0/ *C*0;9 *:*7’9/ /_. <.> [email protected]8 !"#$%&# ($)*%*+,+-. /00D !"#$%&# ($)*%*+,+-. /00H P.:71)*/. /3*‘0 -*/*9./9? •-&T=& @E5#06$=2A •\Za -!RR @M$1(; 2)(($20$/ 10 "21/$&-2 C#%=0.=)#%A &C*0; -*/*9./9 @:14-).% ?-#/% )* 4$1( 1>12?% 2)(($20$/ *4)& :14-).% %).42$% )# C#0$4#$0; $8<8 FFF8&-(FN4&82)&A? •#_.++0(8.a 4PRZa \.’.370 1#/ b##A#cP 96$ 2)&3.01=)#1( 2)%0 21# ’$ %-<#-O21#0(5 4$/.2$/ ’5 &):-#< 06$ 9+787’: <7’8(< )* )(3. /_*’ (’. >,/. 2(3<*38 F-06).0 1 4$($:1#0 ()%% )* &U45 &U45 (’ /_. \.’.370 &C*0; 8*/*9./" FGG=*,+ 126-$:$% 1# 6-<6$4 =*31*+ &U4 F-06 4$%3$20 0) 34$:-).%(5 34)3)%$/ %)(.=)#% @$8<8 G0=&-A "# 1334)126 ’1%$/ )# )6+15+. 0+*997d.39 *++(<% 0) 1>1-# >.C.3 4$%.(0% -# 0$4&% )* 0+*997d0*1(’ *0063*0, WAPA 2010 Workshop on Applications Of Pattern Analysis
-
Upload
pra-group-university-of-cagliari -
Category
Technology
-
view
284 -
download
0
Transcript of Ariu - Workshop on Applications of Pattern Analysis 2010 - Poster
!!!"!"#!$#%$&'($!)*!+,,!-%!.%$/!0)!1%%)2-10$!1!!
34)'1'-(-05!0)!$126!%$7.$#2$!-#!#8!9)!)'01-#!1#!
):$41((!34)'1'-(-05!*)4!06$!315()1/;!06$!1:$41<$!)*!
34)'1'-(-=$%!$&->$/!'5!$126!+,,!-%!21(2.(10$/8!
Group R A P
Pattern Recognition and
Applications Group http://prag.diee.unica.it
HMMPayl: an application of HMM to
the analysis of the HTTP payload University of
Cagliari - Italy
Davide Ariu - Giorgio Giacinto [davide.ariu - giacinto]@diee.unica.it
$"%&'()*+,%-./.01('%2(3%4()56/.3%#.0637/,%
96$!/3*871('*+%1334)126!0)!!'/3697('%-./.01('!
4$(-$%!)#!%5%0$&%!'1%$/!)#!1!/101'1%$!)*!
97:'*/63.9!0610!/$%24-'$!;'(<'%1>12?%8!
=3(>+.)?%'[email protected]..'A>.2(3.!@0610!-%!6';'(<'A!
1>12?%!21#!#)0!'$!/$0$20$/BBB%
4(6'/.3).*963.?%1#)&1(5!'1%$/!CDE!24$10$!1!
%01=%=21(!&)/$(!)*!06$!($<-=&10$!31>$4#%8!"#5!
31>$4#!F6)%$!%01=%=21(!&)/$(!/$:-10$%!*4)&!0610!
%0)4$/!-#!06$!%5%0$&!-%!(1'$($/!1%!1#!1>12?%8!
B.3(A8*,9%*C*0;9%0*'%>.%8./.0/.8DDD!!
E"%FGG=*,+?%*'%*'()*+,%>*9.8%!'/3697('%-./.01('%#,9/.)%
H$% IJ% KL% LH% JK%
H$% IJ% KL%
IJ% KL% LH%
KL% LH% JK%
M"IE%
M"H$%
M"IL%
FGG$%
FGGN%
FGGE%
M"II%
M"IO%
M"IK%
G4#%
=3(>*>7+7/,%
)4!
4+*99%P*>.+!
!"!G-:$#!1#!+99H!315()1/88!
!!"!881!%(-/-#<!F-#/)F!)*!F-/06!!
'!4.#%!):$4!06$!315()1/!1#/!!
$I04120%!1!%$0!)*!%$7.$#2$%!!
#!@'JK!-#!06-%!$I1&3($A!
!Q"!96$!315()1/L%!34)'1'-(-=$%!
)'01-#$/!10!06$!34$:-).%!%0$3!14$!!
2)&'-#$/!0)!)'01-#!1#!):$41((!!
34)'1'-(-05!)4!1!2(1%%!(1'$(!
!"#$%&#'
($)*%*+,+-.'
/001'
L"%RS5.37).'/*+%T.96+/9%
23+4'$#4#%$53'6%4'4()74)$#8'*.'-3#'!9-)7):)94';#&+)7')<'
=%$8+7+%'-3$)9&3'%'&$%7-'>7%75#8'6+-3'-3#'?=%$8+7+%'@A'B=C'
DEEFGDE1H?'<9784'%78'($)"+8#8'%55)$8+7&'-)'-3#'IJ;J'FKDEEFJ'RUTV=R&W%UW!VW% TR=UXP!4%VY%!Z&P[% &UZVWVGVU#%TR\!VW%
VY%#&T-!W!&%
Dept. of Electrical and
Electronic Engineering!
N"%FZZ=%=*,+(*8%&'*+,979%
"!9/*1910*+%%
)(8.+!)*!06$!!
>,/.9]%%
879/37>61('!!
F-06-#!06$!!
FZZ=%5*,+(*8%%
)*!06$!3.^6.9/9%%
4$2$-:$/!'5!1!!
<.>%[email protected]%&-<60!!
1(()F!0)!8./.0/%*C*0;9%*:*7'9/%/_.%<.>%[email protected]!
!"#$%&#'
($)*%*+,+-.'
/00D'
!"#$%&#'
($)*%*+,+-.'
/00H'
P.:71)*/.%/3*`0%%-*/*9./9?%
•!-&T=&%@E5#06$=2A!
•!\Za%-!RR%@M$1(;!2)(($20$/!10!"21/$&-2!C#%=0.=)#%A!
&C*0;%-*/*9./9%@:14-).%!?-#/%!)*!4$1(!1>12?%!2)(($20$/!*4)&!
:14-).%!%).42$%!)#!C#0$4#$0;!$8<8!FFF8&-(FN4&82)&A?%
•!#_.++0(8.a%4PRZa%\.'.370%1#/%b##A#cP!%%
96$!2)&3.01=)#1(!2)%0!!21#!'$!
%-<#-O21#0(5!4$/.2$/!'5!&):-#<!06$!9+787':%
<7'8(<!)*!)(3.%/_*'%('.%>,/.%2(3<*38!
F-06).0!1!4$($:1#0!()%%!)*!&U45%
&U45%('%/_.%\.'.370%&C*0;%8*/*9./"%
FGG=*,+%126-$:$%!1#!6-<6$4!=*31*+!&U4!
F-06!4$%3$20!0)!34$:-).%(5!34)3)%$/!
%)(.=)#%!@$8<8!G0=&-A!
"#!1334)126!'1%$/!)#!)6+15+.%0+*997d.39%
*++(<%!0)!1>1-#!>.C.3%4$%.(0%!-#!0$4&%!)*!
0+*997d0*1('%*0063*0,%
WAPA 2010 Workshop on Applications
Of Pattern Analysis!
