BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks
Joint Authors
Pratomo, Baskoro A.
Burnap, Pete
Theodorakopoulos, George
Source
Security and Communication Networks
Issue
Vol. 2020, Issue 2020 (31 Dec. 2020), pp.1-15, 15 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2020-08-04
Country of Publication
Egypt
No. of Pages
15
Main Subjects
Information Technology and Computer Science
Abstract EN
Detecting exploits is crucial since the effect of undetected ones can be devastating.
Identifying their presence on the network allows us to respond and block their malicious payload before they cause damage to the system.
Inspecting the payload of network traffic may offer better performance in detecting exploits as they tend to hide their presence and behave similarly to legitimate traffic.
Previous works on deep packet inspection for detecting malicious traffic regularly read the full length of application layer messages.
As the length varies, longer messages will take more time to analyse, during which time the attack creates a disruptive impact on the system.
Hence, we propose a novel early exploit detection mechanism that scans network traffic, reading only 35.21% of application layer messages to predict malicious traffic while retaining a 97.57% detection rate and a 1.93% false positive rate.
Our recurrent neural network- (RNN-) based model is the first work to our knowledge that provides early prediction of malicious application layer messages, thus detecting a potential attack earlier than other state-of-the-art approaches and enabling a form of early warning system.
American Psychological Association (APA)
Pratomo, Baskoro A.& Burnap, Pete& Theodorakopoulos, George. 2020. BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks. Security and Communication Networks،Vol. 2020, no. 2020, pp.1-15.
https://search.emarefa.net/detail/BIM-1208609
Modern Language Association (MLA)
Pratomo, Baskoro A.…[et al.]. BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks. Security and Communication Networks No. 2020 (2020), pp.1-15.
https://search.emarefa.net/detail/BIM-1208609
American Medical Association (AMA)
Pratomo, Baskoro A.& Burnap, Pete& Theodorakopoulos, George. BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks. Security and Communication Networks. 2020. Vol. 2020, no. 2020, pp.1-15.
https://search.emarefa.net/detail/BIM-1208609
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1208609