@inproceedings{c5e899fe3e274428bdc3cd9393b3b21d,
title = "Automated signature extraction for high volume attacks",
abstract = "We present a basic tool for zero day attack signature extraction. Given two large sets of messages, P of messages captured in the network at peacetime (i.e., mostly legitimate traffic) and A captured during attack time (i.e., contains many attack messages), we present a tool for extracting a set S of strings, that are frequently found in A and not in P. Therefore, a packet containing one of the strings from S is likely to be an attack packet.",
author = "Yehuda Afek and \{Landau Feibish\}, Shir",
year = "2013",
doi = "10.1109/ANCS.2013.6665197",
language = "الإنجليزيّة",
isbn = "9781479916405",
series = "ANCS 2013 - Proceedings of the 9th ACM/IEEE Symposium on Architectures for Networking and Communications Systems",
publisher = "IEEE Computer Society",
pages = "147--156",
booktitle = "ANCS 2013 - Proceedings of the 9th ACM/IEEE Symposium on Architectures for Networking and Communications Systems",
address = "الولايات المتّحدة",
note = "9th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2013 ; Conference date: 21-10-2013 Through 22-10-2013",
}