Towards Trustworthy Web Attack Detection: An Uncertainty-Aware Ensemble Deep Kernel Learning Model Article Swipe

MAKE IMPACT

Yonghang Zhou , Hongyi Zhu , Yidong Chai , Yuanchun Jiang , Yezheng Liu · YOU? · · 2024 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2410.07725

Web attacks are one of the major and most persistent forms of cyber threats, which bring huge costs and losses to web application-based businesses. Various detection methods, such as signature-based, machine learning-based, and deep learning-based, have been proposed to identify web attacks. However, these methods either (1) heavily rely on accurate and complete rule design and feature engineering, which may not adapt to fast-evolving attacks, or (2) fail to estimate model uncertainty, which is essential to the trustworthiness of the prediction made by the model. In this study, we proposed an Uncertainty-aware Ensemble Deep Kernel Learning (UEDKL) model to detect web attacks from HTTP request payload data with the model uncertainty captured from the perspective of both data distribution and model parameters. The proposed UEDKL utilizes a deep kernel learning model to distinguish normal HTTP requests from different types of web attacks with model uncertainty estimated from data distribution perspective. Multiple deep kernel learning models were trained as base learners to capture the model uncertainty from model parameters perspective. An attention-based ensemble learning approach was designed to effectively integrate base learners' predictions and model uncertainty. We also proposed a new metric named High Uncertainty Ratio-F Score Curve to evaluate model uncertainty estimation. Experiments on BDCI and SRBH datasets demonstrated that the proposed UEDKL framework yields significant improvement in both web attack detection performance and uncertainty estimation quality compared to benchmark models.

Type

preprint

Language

en

Landing Page

http://arxiv.org/abs/2410.07725

PDF

https://arxiv.org/pdf/2410.07725

OA Status

green

Related Works

10

OpenAlex ID

https://openalex.org/W4403364762

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4403364762

Canonical identifier for this work in OpenAlex

DOI

https://doi.org/10.48550/arxiv.2410.07725

Digital Object Identifier

Title

Towards Trustworthy Web Attack Detection: An Uncertainty-Aware Ensemble Deep Kernel Learning Model

Work title

Type

preprint

OpenAlex work type

Language

en

Primary language

Publication year

2024

Year of publication

Publication date

2024-10-10

Full publication date if available

Authors

Yonghang Zhou, Hongyi Zhu, Yidong Chai, Yuanchun Jiang, Yezheng Liu

List of authors in order

Landing page

https://arxiv.org/abs/2410.07725

Publisher landing page

PDF URL

https://arxiv.org/pdf/2410.07725

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2410.07725

Direct OA link when available

Concepts

Trustworthiness, Computer science, Ensemble learning, Artificial intelligence, Kernel (algebra), Deep learning, Machine learning, Computer security, Mathematics, Combinatorics

Top concepts (fields/topics) attached by OpenAlex

Cited by

0

Total citation count in OpenAlex

Related works (count)

10

Other works algorithmically related by OpenAlex

Full payload