Security and Privacy in New Computing Environments. Second EAI International Conference, SPNCE 2019, Tianjin, China, April 13–14, 2019, Proceedings

Research Article

BL-IDS: Detecting Web Attacks Using Bi-LSTM Model Based on Deep Learning

Download
556 downloads
  • @INPROCEEDINGS{10.1007/978-3-030-21373-2_45,
        author={Saiyu Hao and Jun Long and Yingchuan Yang},
        title={BL-IDS: Detecting Web Attacks Using Bi-LSTM Model Based on Deep Learning},
        proceedings={Security and Privacy in New Computing Environments. Second EAI International Conference, SPNCE 2019, Tianjin, China, April 13--14, 2019, Proceedings},
        proceedings_a={SPNCE},
        year={2019},
        month={6},
        keywords={Web attacks Deep learning Bidirectional long-short term memory},
        doi={10.1007/978-3-030-21373-2_45}
    }
    
  • Saiyu Hao
    Jun Long
    Yingchuan Yang
    Year: 2019
    BL-IDS: Detecting Web Attacks Using Bi-LSTM Model Based on Deep Learning
    SPNCE
    Springer
    DOI: 10.1007/978-3-030-21373-2_45
Saiyu Hao1,*, Jun Long1,*, Yingchuan Yang2
  • 1: National University of Defense Technology
  • 2: Institute of Atmospheric Physics, Chinese Academy of Sciences
*Contact email: haosaiyu17@nudt.edu.cn, junlong@nudt.edu.cn

Abstract

Current anomaly-based network attack detection methods face difficulties such as unsatisfied accuracy and lack of generalization. The Rule-based Web attack detection is difficult to combat against unknown attacks and is relatively easy to bypass. Therefore, we propose a new method to detect Web attacks using deep learning. The method is based on analyzing HTTP request, where only some preprocessing is required, and the automatic feature extraction is done by the Bi-LSTM itself. The experimental results on the dataset HTTP DATASET CSIC 2010 show that the Bi-LSTM has good performance. This method has achieved state-of-the-art results in detecting Web attacks, and has a high detection rate while maintaining a low false alarm rate.