Log File Analysis with Context-Free Grammars - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Log File Analysis with Context-Free Grammars

Résumé

Classical intrusion analysis of network log files uses statistical machine learning or regular expressions. Where statistically machine learning methods are not analytically exact, methods based on regular expressions do not reach up very far in Chomsky’s hierarchy of languages. This paper focuses on parsing traces of network traffic using context-free grammars. “Green grammars” are used to describe acceptable log files while “red grammars” are used to represent known intrusion patterns. This technique can complement or augment existing approaches by providing additional precision. Analytically, the technique is also more powerful than existing techniques that use regular expressions.
Fichier principal
Vignette du fichier
978-3-642-41148-9_10_Chapter.pdf (501.67 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01460602 , version 1 (07-02-2017)

Licence

Paternité

Identifiants

Citer

Gregory Bosman, Stefan Gruner. Log File Analysis with Context-Free Grammars. 9th International Conference on Digital Forensics (DF), Jan 2013, Orlando, FL, United States. pp.145-152, ⟨10.1007/978-3-642-41148-9_10⟩. ⟨hal-01460602⟩
122 Consultations
250 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More