<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01405662</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T02:42:27+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">A Proposal of Algorithm for Web Applications Cyber Attack Detection</title>
            <author role="aut">
              <persName>
                <forename type="first">Rafał</forename>
                <surname>Kozik</surname>
              </persName>
              <email type="md5">377d12df153ebf484fcaa6311594c0ca</email>
              <email type="domain">utp.edu.pl</email>
              <idno type="idhal" notation="numeric">994977</idno>
              <idno type="halauthorid" notation="string">1086739-994977</idno>
              <affiliation ref="#struct-474216"/>
              <affiliation ref="#struct-474217"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Michał</forename>
                <surname>Choraś</surname>
              </persName>
              <email type="md5">3bd01cf03a57035177b884b089da1af2</email>
              <email type="domain">itti.com.pl</email>
              <idno type="idhal" notation="numeric">994978</idno>
              <idno type="halauthorid" notation="string">1086740-994978</idno>
              <affiliation ref="#struct-474216"/>
              <affiliation ref="#struct-474217"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Rafał</forename>
                <surname>Renk</surname>
              </persName>
              <email type="md5">2247646742af9b1d0f0cdd454ce44e4c</email>
              <email type="domain">amu.edu.pl</email>
              <idno type="idhal" notation="numeric">994979</idno>
              <idno type="halauthorid" notation="string">1086741-994979</idno>
              <affiliation ref="#struct-474216"/>
              <affiliation ref="#struct-307219"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Witold</forename>
                <surname>Hołubowicz</surname>
              </persName>
              <idno type="halauthorid">1086742-0</idno>
              <affiliation ref="#struct-474217"/>
              <affiliation ref="#struct-307219"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2016-11-30 11:28:06</date>
              <date type="whenModified">2024-02-16 17:06:05</date>
              <date type="whenReleased">2016-11-30 11:38:24</date>
              <date type="whenProduced">2014-11-05</date>
              <date type="whenEndEmbargoed">2017-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01405662v1/document">
                <date notBefore="2017-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01405662v1/file/978-3-662-45237-0_61_Chapter.pdf" id="file-1405662-1492553">
                <date notBefore="2017-01-01"/>
              </ref>
              <ref type="externalLink" target="https://hal.inria.fr/hal-01405662/file/978-3-662-45237-0_61_Chapter.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01405662</idno>
            <idno type="halUri">https://inria.hal.science/hal-01405662</idno>
            <idno type="halBibtex">kozik:hal-01405662</idno>
            <idno type="halRefHtml">&lt;i&gt;13th IFIP International Conference on Computer Information Systems and Industrial Management (CISIM)&lt;/i&gt;, Nov 2014, Ho Chi Minh City, Vietnam. pp.680-687, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-662-45237-0_61"&gt;&amp;#x27E8;10.1007/978-3-662-45237-0_61&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">13th IFIP International Conference on Computer Information Systems and Industrial Management (CISIM), Nov 2014, Ho Chi Minh City, Vietnam. pp.680-687, &amp;#x27E8;10.1007/978-3-662-45237-0_61&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1405662-1492553"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="SHS">Sciences de l'Homme et de la Société</idno>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC8" corresp="IFIP-TC">IFIP-TC8: Information Systems</idno>
            <idno type="stamp" n="IFIP-LNCS-8838" corresp="IFIP-LNCS">Computer Information Systems and Industrial Management</idno>
            <idno type="stamp" n="IFIP-CISIM">IFIP-CISIM</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 9: Various Aspects of Computer Security</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">A Proposal of Algorithm for Web Applications Cyber Attack Detection</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Rafał</forename>
                    <surname>Kozik</surname>
                  </persName>
                  <email type="md5">377d12df153ebf484fcaa6311594c0ca</email>
                  <email type="domain">utp.edu.pl</email>
                  <idno type="idhal" notation="numeric">994977</idno>
                  <idno type="halauthorid" notation="string">1086739-994977</idno>
                  <affiliation ref="#struct-474216"/>
                  <affiliation ref="#struct-474217"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Michał</forename>
                    <surname>Choraś</surname>
                  </persName>
                  <email type="md5">3bd01cf03a57035177b884b089da1af2</email>
                  <email type="domain">itti.com.pl</email>
                  <idno type="idhal" notation="numeric">994978</idno>
                  <idno type="halauthorid" notation="string">1086740-994978</idno>
                  <affiliation ref="#struct-474216"/>
                  <affiliation ref="#struct-474217"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Rafał</forename>
                    <surname>Renk</surname>
                  </persName>
                  <email type="md5">2247646742af9b1d0f0cdd454ce44e4c</email>
                  <email type="domain">amu.edu.pl</email>
                  <idno type="idhal" notation="numeric">994979</idno>
                  <idno type="halauthorid" notation="string">1086741-994979</idno>
                  <affiliation ref="#struct-474216"/>
                  <affiliation ref="#struct-307219"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Witold</forename>
                    <surname>Hołubowicz</surname>
                  </persName>
                  <idno type="halauthorid">1086742-0</idno>
                  <affiliation ref="#struct-474217"/>
                  <affiliation ref="#struct-307219"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>13th IFIP International Conference on Computer Information Systems and Industrial Management (CISIM)</title>
                  <date type="start">2014-11-05</date>
                  <date type="end">2014-11-07</date>
                  <settlement>Ho Chi Minh City</settlement>
                  <country key="VN">Vietnam</country>
                </meeting>
                <editor>Khalid Saeed</editor>
                <editor>Václav Snášel</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Computer Information Systems and Industrial Management</biblScope>
                  <biblScope unit="volume">LNCS-8838</biblScope>
                  <biblScope unit="pp">680-687</biblScope>
                  <date type="datePub">2014</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-662-45237-0_61</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">data mining</term>
                <term xml:lang="en">machine learning</term>
                <term xml:lang="en">web applications firewall</term>
                <term xml:lang="en">web attacks detection</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="shs.info">Humanities and Social Sciences/Library and information sciences</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Injection attacks (e.g. XSS or SQL) are ranked at the first place in world-wide lists (e.g. MITRE and OWASP). These types of attacks can be easily obfuscated. Therefore it is difficult or even impossible to provide a reliable signature for firewalls that will detect such attacks. In this paper, we have proposed an innovative method for modelling the normal behaviour of web applications. The model is based on information obtained from HTTP requests generated by a client to a web server. We have evaluated our method on CSIC 2010 HTTP Dataset achieving satisfactory results.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 8</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-474216" status="VALID">
          <orgName>ITTI Company Limited [Poznań]</orgName>
          <date type="start">2016-12-01</date>
          <desc>
            <address>
              <addrLine>)</addrLine>
              <country key="PL"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-474217" status="VALID">
          <orgName>UT&amp;LS Bydgoszcz</orgName>
          <date type="start">2016-12-01</date>
          <desc>
            <address>
              <country key="PL"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-307219" status="VALID">
          <orgName>Uniwersytet im. Adama Mickiewicza w Poznaniu  = Adam Mickiewicz University in Poznań</orgName>
          <orgName type="acronym">UAM</orgName>
          <desc>
            <address>
              <addrLine>Uniwersytet im. Adama Mickiewicza w Poznaniu ul. Wieniawskiego 1 61-712 Poznań</addrLine>
              <country key="PL"/>
            </address>
            <ref type="url">https://international.amu.edu.pl/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>