HTTP Request Clustering for Automated Threat Detection
Lorenzo Ferretti
HTTP Request Clustering for Automated Threat Detection.
Rel. Andrea Atzeni. Politecnico di Torino, Corso di laurea magistrale in Cybersecurity, 2025
|
Preview |
PDF (Tesi_di_laurea)
- Tesi
Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) | Preview |
|
|
Archive (ZIP) (Documenti_allegati)
- Altro
Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) |
Abstract
This work explores session clustering to analyze web traffic, treating each session as a sequence of user requests. Using unsupervised machine learning, it aims to uncover behavioral patterns useful for identifying navigation habits, anomalies, and potential attacks. The proposed method clusters and labels web sessions using only server-side HTTP logs, relying on headers and aggregated features to distinguish between normal and malicious activities. The implementation, developed in Python using data from Elasticsearch, employs Large Language Models (LLMs) alongside manual analysis to interpret and verify the resulting clusters.
Tipo di pubblicazione
URI
![]() |
Modifica (riservato agli operatori) |
