 |
In conclusion, we propose a real-time system to prevent malicious payloads in network traffic. To enhance the snort firewall's defensive rate of packets, the system adopts hybrid algorithms like K-means and LSHash. Our system can automatically generate snort firewall rules and aim to resolve manually defined rules config errors. Also, the defensive rate of our system reaches 93%. In summary, this study contributes to preventing malicious packets. Secondary clustering and payload analysis are feasible research directions for detecting malicious packets. |
IEEE/ICACT20240269 Slide.22
[Big Slide]