Anomaly detection techniques for a web defacement monitoring service

Expert Systems with Applications

Volumn 38, Issue 10, 2011, Pages 12521-12530

  Davanzo, G ^a   Medvet, E ^a   Bartoli, A ^a  

^a UNIVERSITY OF TRIESTE   (Italy)

Author keywords

Machine learning; Security; Web defacement

Indexed keywords

ANOMALY DETECTION; DATA SETS; DETECTION CAPABILITY; DYNAMIC WEB-PAGES; FALSE NEGATIVES; FALSE POSITIVE; MACHINE-LEARNING; MONITORING SERVICES; ON-MACHINES; PERFORMANCE MONITORING; SECURITY; WEB DEFACEMENT;

LEARNING SYSTEMS; WEBSITES;

USER INTERFACES;

EID: 79957985082     PISSN: 09574174     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.eswa.2011.04.038     Document Type: Article

References (28)

1. 13 free and cheap website monitoring services. URL:
2. N. Ailon, and B. Chazelle Faster dimension reduction Communications of the ACM 53 2 2010 97 104 10.1145/1646353.1646379 URL:
3. Baidu sues registrar over DNS records hack (2010). URL: .
4. Barreno, M., Nelson, B., Sears, R., Joseph, A. D., & Tygar, J. D. (2006). Can machine learning be secure?In Proceedings of the 2006 ACM symposium on information, computer and communications security (pp. 16-25). Taipei, Taiwan; ACM. Invited talk. doi:10.1145/1128817.1128824. URL: . (Pubitemid 46644722)
5. A. Bartoli, G. Davanzo, and E. Medvet The reaction time to web site defacements IEEE Internet Computing 13 4 2009 52 58
6. A. Bartoli, and E. Medvet Automatic integrity checks for remote web resources IEEE Internet Computing 10 2006 56 62 (Pubitemid 44811671)
7. Boser, B. E., Guyon, I. M., & Vapnik, V. N. (1992). A training algorithm for optimal margin classifiers. In Annual workshop on computational learning theory (pp. 144-152). Pittsburgh, Pennsylvania, United States: ACM.
8. M.M. Breunig, H.-P. Kriegel, R.T. Ng, and J. Sander Lof: identifying density-based local outliers SIGMOD Record 29 2000 93 104
9. V. Chandola, A. Banerjee, and V. Kumar Anomaly detection: A survey ACM Computing Surveys 41 3 2009 1 58 10.1145/1541880.1541882
10. D.E. Denning An intrusion-detection model IEEE Transactions on Software Engineering 13 1987 222 232
11. Hackers hit network solutions customers (2010). URL: .
12. H. Hotelling The generalization of student's ratio The Annals of Mathematical Statistics 2 1931 360 378
13. Jolliffe Principal component analysis 2002 Springer
14. Kim, E., & Kim, S. (2006). Anomaly detection in network security based on nonparametric techniques. In Proceedings of the INFOCOM 2006. 25th IEEE international conference on computer communications (pp. 1-2).
15. H. Kriegel, P. Krger, and A. Zimek Clustering high-dimensional data: A survey on subspace clustering, pattern-based clustering, and correlation clustering ACM Transactions on Knowledge Discovery Data 3 1 2009 1 58 10.1145/1497577.1497578 URL
16. MultiInjector v0.3 released (November 2008). URL:
17. D. Mutz, F. Valeur, G. Vigna, and C. Kruegel Anomalous system call detection ACM Transactions on Information Systems and Security 9 2006 61 93
18. E. Parzen On estimation of a probability density function and mode The Annals of Mathematical Statistics 33 1962 1065 1076
19. A. Patcha, and J. Park An overview of anomaly detection techniques: Existing solutions and latest technological trends Computer Networks 51 12 2007 3448 3470 URL:
20. Puerto rico sites redirected in DNS attack security (April 2009). URL: .
21. S. Ramaswamy, R. Rastogi, and K. Shim Efficient algorithms for mining outliers from large data sets SIGMOD Record 29 2000 427 438
22. Song, L., Smola, A., Gretton, A., Borgwardt, K. M., & Bedo, J. (2007). Supervised feature selection via dependence estimation. In Proceedings of the 24th international conference on machine learning (pp. 823-830). Corvalis, Oregon: ACM. doi:10.1145/1273496.1273600. URL: . (Pubitemid 47275143)
23. C. Tsai, Y. Hsu, C. Lin, and W. Lin Intrusion detection by machine learning: A review Expert Systems with Applications 36 10 2009 11994 12000 10.1016/j.eswa.2009.05.029 URL
24. Xu, W., Huang, L., Fox, A., Patterson, D., Jordan, M. I. (2009). Detecting large-scale system problems by mining console logs. In: Proceedings of the ACM SIGOPS 22nd symposium on operating systems principles (pp. 117-132). Big Sky, Montana, USA: ACM. doi:10.1145/1629575.1629587. URL: .
25. Ye, N., Chen, Q., Emran, S. M., & Vilbert, S. (2000). Hotelling t2 multivariate profiling for anomaly detection. In Proceedings of the 1st IEEE SMC information assurance and security workshop.
26. N. Ye, S. Emran, Q. Chen, and S. Vilbert Multivariate statistical analysis of audit trails for host-based intrusion detection IEEE Transactions on Computers 51 7 2002 810 820 10.1109/TC.2002.1017701
27. N. Ye, X. Li, Q. Chen, S. Emran, and M. Xu Probabilistic techniques for intrusion detection based on computer audit data IEEE Transactions on Systems, Man and Cybernetics, Part A 31 2001 266 274 (Pubitemid 33142052)
28. Yeung, D. -Y., & Chow, C. (2002). Parzen-window network intrusion detectors. In: Proceedings of the 16th international conference on pattern recognition (Vol. 4, pp. 385-388). (Pubitemid 44851023)