Lorenzo Ferretti
HTTP Request Clustering for Automated Threat Detection.
Rel. Andrea Atzeni. Politecnico di Torino, Master of science program in Cybersecurity, 2025
|
Preview |
PDF (Tesi_di_laurea)
- Thesis
Licence: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) | Preview |
|
|
Archive (ZIP) (Documenti_allegati)
- Other
Licence: Creative Commons Attribution Non-commercial No Derivatives. Download (3MB) |
Abstract
This work explores session clustering to analyze web traffic, treating each session as a sequence of user requests. Using unsupervised machine learning, it aims to uncover behavioral patterns useful for identifying navigation habits, anomalies, and potential attacks. The proposed method clusters and labels web sessions using only server-side HTTP logs, relying on headers and aggregated features to distinguish between normal and malicious activities. The implementation, developed in Python using data from Elasticsearch, employs Large Language Models (LLMs) alongside manual analysis to interpret and verify the resulting clusters.
Relators
Academic year
Publication type
Number of Pages
Course of studies
Classe di laurea
Aziende collaboratrici
URI
![]() |
Modify record (reserved for operators) |
