MASD: Malicious Web Session Detection Using ML-Based Classifier

Dilek Yılmazer Demirel, Mehmet Tahir Sandıkkaya

2023

Abstract

The development of web applications and services has resulted in an increase in security concerns, especially in identifying malicious web session attacks. Malicious web sessions pose a significant risk to users, potentially resulting in data breaches, illegal access, and other malicious activities. This study presents an innovative technique for detecting malicious web sessions using a machine learning-driven classifier. To examine the features of web sessions, the suggested technique combines an embedding layer and machine learning approaches. Three different datasets were used in the empirical studies to confirm the effectiveness of the approach. They include a unique compilation of Internet banking web request logs, provided by Yap Kredi Teknoloji, as well as the well-known HTTP dataset CSIC 2010 and the publicly accessible WAF dataset. The experimental results are compared to known approaches such as Random Forest, Convolutional Neural Networks (CNN), Support Vector Machines (SVM), Naı̈ve Bayes, Decision Trees, DBSCAN, and Self-Organizing Maps (SOM). The actual findings demonstrate the superiority of the suggested technique, especially when Random Forest is used as the chosen classifier. The attained accuracy rate of 99.17% surpasses the comparison methodologies, highlighting the approach’s ability to efficiently identify and block malicious web sessions.

Paper Citation

in Harvard Style

Yılmazer Demirel D. and Sandıkkaya M. (2023). MASD: Malicious Web Session Detection Using ML-Based Classifier. In Proceedings of the 15th International Joint Conference on Computational Intelligence - Volume 1: NCTA; ISBN 978-989-758-674-3, SciTePress, pages 487-495. DOI: 10.5220/0012174800003595

in Bibtex Style

@conference{ncta23,
author={Dilek Yılmazer Demirel and Mehmet Tahir Sandıkkaya},
title={MASD: Malicious Web Session Detection Using ML-Based Classifier},
booktitle={Proceedings of the 15th International Joint Conference on Computational Intelligence - Volume 1: NCTA},
year={2023},
pages={487-495},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012174800003595},
isbn={978-989-758-674-3},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 15th International Joint Conference on Computational Intelligence - Volume 1: NCTA
TI - MASD: Malicious Web Session Detection Using ML-Based Classifier
SN - 978-989-758-674-3
AU - Yılmazer Demirel D.
AU - Sandıkkaya M.
PY - 2023
SP - 487
EP - 495
DO - 10.5220/0012174800003595
PB - SciTePress