Download - Ariu - Workshop on Applications of Pattern Analysis 2010 - Poster

!!!"!"#!$#%$&'($!)*!+,,!-%!.%$/!0)!1%%)2-10$!1!!

34)'1'-(-05!0)!$126!%$7.$#2$!-#!#8!9)!)'01-#!1#!

):$41((!34)'1'-(-05!*)4!06$!315()1/;!06$!1:$41<$!)*!

34)'1'-(-=$%!$&->$/!'5!$126!+,,!-%!21(2.(10$/8!

Group R A P

Pattern Recognition and

Applications Group http://prag.diee.unica.it

HMMPayl: an application of HMM to

the analysis of the HTTP payload University of

Cagliari - Italy

Davide Ariu - Giorgio Giacinto [davide.ariu - giacinto]@diee.unica.it

$"%&'()*+,%-./.01('%2(3%4()56/.3%#.0637/,%

96$!/3*871('*+%1334)126!0)!!'/3697('%-./.01('!

4$(-$%!)#!%5%0$&%!'1%$/!)#!1!/101'1%$!)*!

97:'*/63.9!0610!/$%24-'$!;'(<'%1>12?%8!

=3(>+.)?%'[email protected]..'A>.2(3.!@0610!-%!6';'(<'A!

1>12?%!21#!#)0!'$!/$0$20$/BBB%

4(6'/.3).*963.?%1#)&1(5!'1%$/!CDE!24$10$!1!

%01=%=21(!&)/$(!)*!06$!($<-=&10$!31>$4#%8!"#5!

31>$4#!F6)%$!%01=%=21(!&)/$(!/$:-10$%!*4)&!0610!

%0)4$/!-#!06$!%5%0$&!-%!(1'$($/!1%!1#!1>12?%8!

B.3(A8*,9%*C*0;9%0*'%>.%8./.0/.8DDD!!

E"%FGG=*,+?%*'%*'()*+,%>*9.8%!'/3697('%-./.01('%#,9/.)%

H$% IJ% KL% LH% JK%

H$% IJ% KL%

IJ% KL% LH%

KL% LH% JK%

M"IE%

M"H$%

M"IL%

FGG$%

FGGN%

FGGE%

M"II%

M"IO%

M"IK%

G4#%

=3(>*>7+7/,%

)4!

4+*99%P*>.+!

!"!G-:$#!1#!+99H!315()1/88!

!!"!881!%(-/-#<!F-#/)F!)*!F-/06!!

'!4.#%!):$4!06$!315()1/!1#/!!

$I04120%!1!%$0!)*!%$7.$#2$%!!

#!@'JK!-#!06-%!$I1&3($A!

!Q"!96$!315()1/L%!34)'1'-(-=$%!

)'01-#$/!10!06$!34$:-).%!%0$3!14$!!

2)&'-#$/!0)!)'01-#!1#!):$41((!!

34)'1'-(-05!)4!1!2(1%%!(1'$(!

!"#$%&#'

($)*%*+,+-.'

/001'

L"%RS5.37).'/*+%T.96+/9%

23+4'$#4#%$53'6%4'4()74)$#8'*.'-3#'!9-)7):)94';#&+)7')<'

=%$8+7+%'-3$)9&3'%'&$%7-'>7%75#8'6+-3'-3#'?=%$8+7+%'@A'B=C'

DEEFGDE1H?'<9784'%78'($)"+8#8'%55)$8+7&'-)'-3#'IJ;J'FKDEEFJ'RUTV=R&W%UW!VW% TR=UXP!4%VY%!Z&P[% &UZVWVGVU#%TR\!VW%

VY%#&T-!W!&%

Dept. of Electrical and

Electronic Engineering!

N"%FZZ=%=*,+(*8%&'*+,979%

"!9/*1910*+%%

)(8.+!)*!06$!!

>,/.9]%%

879/37>61('!!

F-06-#!06$!!

FZZ=%5*,+(*8%%

)*!06$!3.^6.9/9%%

4$2$-:$/!'5!1!!

<.>%[email protected]%&-<60!!

1(()F!0)!8./.0/%*C*0;9%*:*7'9/%/_.%<.>%[email protected]!

!"#$%&#'

($)*%*+,+-.'

/00D'

!"#$%&#'

($)*%*+,+-.'

/00H'

P.:71)*/.%/3*`0%%-*/*9./9?%

•!-&T=&%@E5#06$=2A!

•!\Za%-!RR%@M$1(;!2)(($20$/!10!"21/$&-2!C#%=0.=)#%A!

&C*0;%-*/*9./9%@:14-).%!?-#/%!)*!4$1(!1>12?%!2)(($20$/!*4)&!

:14-).%!%).42$%!)#!C#0$4#$0;!$8<8!FFF8&-(FN4&82)&A?%

•!#_.++0(8.a%4PRZa%\.'.370%1#/%b##A#cP!%%

96$!2)&3.01=)#1(!2)%0!!21#!'$!

%-<#-O21#0(5!4$/.2$/!'5!&):-#<!06$!9+787':%

<7'8(<!)*!)(3.%/_*'%('.%>,/.%2(3<*38!

F-06).0!1!4$($:1#0!()%%!)*!&U45%

&U45%('%/_.%\.'.370%&C*0;%8*/*9./"%

FGG=*,+%126-$:$%!1#!6-<6$4!=*31*+!&U4!

F-06!4$%3$20!0)!34$:-).%(5!34)3)%$/!

%)(.=)#%!@$8<8!G0=&-A!

"#!1334)126!'1%$/!)#!)6+15+.%0+*997d.39%

*++(<%!0)!1>1-#!>.C.3%4$%.(0%!-#!0$4&%!)*!

0+*997d0*1('%*0063*0,%

WAPA 2010 Workshop on Applications

Of Pattern Analysis!