logo

IncWAD: An Incremental Learning Approach for Web Attack Detection Using MLOps

RESEARCH CREW
12:45 26/08/2023

With the continuous growth of the internet and web applications, billions of websites built and available at our fingertips today lead more and more sophisticated and malicious attacks and pose requirements to build more precise and modern Web Attack Detection (WAD) system. Nowadays, many Machine Learning (ML)-based WAD approaches have been researched and yielded high efficiency. Additionally, to ensure optimal classification performance with data containing new classes, these models are regularly retrained. Nevertheless, the process of retraining models using both old and new data poses significant challenges in terms of computational requirements and storage capacity. On the other hand, when retraining the model with only new data, the model faces the problem of Catastrophic Forgetting (CF) which cannot adequately retain the previously learned amount of knowledge about the old data. To address these problems, in this work, we proposed an Deep Neural Network (DNN)-based WAD together with Incremental Learning (IL) technique, named IncWAD. Besides that, we also designed a Machine Learning Operations (MLOPs) cycle to deploy and manage the ML model conveniently. The evaluation results on the SR-BH 2020 multi-label dataset with various cases indicated that the IncWAD model could classify correctly different types of attacks and reached accuracy more than 95%.

TIN LIÊN QUAN
An Approach of Adaptive Cyber Deception for Active Cyber-attack Defense Method based on Deep Reinforcement Learning
The diverse landscape of network models, including Software-Defined Networking (SDN), Cloud Computing (C2), and Internet of Things (IoT), is evolving to meet the demands of flexibility and performance. However, these environments face numerous security challenges due to cyber-attack complexity. Traditional defense mechanisms are no longer effective against modern attacks. Therefore,...
Multimodal Deep Learning Feedback for Generating Evasive Malware Samples against Malware Detector
As data driven-based Windows malware detectors become increasingly prevalent, the need for robust evaluation and enhancement of adversarial malware generation techniques also becomes imperative, as malicious actors will adapt and enhance their malware to evade detection. There are numerous works that introduce new techniques or enhancements for adversarial malware. One...
Medichain: A multi-chain based system for managing prescription medications using Zero Knowledge Proofs
The abuse of prescription medications has become a severe public health crisis fueled by limited coordination and oversight across healthcare systems. Current frameworks lack interoperability between doctors, pharmacies, and regulators, enabling abusive practices like doctor shopping and pharmacy hopping. To address these issues, this research proposes Medichain, a novel multichain-based...