Using XGBoost to Discover Infected Hosts Based on HTTP Traffic

<table class="table-group" id="tab2"><tr><td><table class="table"><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left">HTTP header field information</td><td class="align_center">Generated templates</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left">Accept: Text json</td><td class="align_center">Accept: Text ∗</td></tr><tr><td class="align_left">Accept-Encoding: Gzip deflate</td><td class="align_center">Accept-Encoding: Gzip ∗</td></tr><tr><td class="align_left">Connection: Keep-Alive</td><td class="align_center">Connection: ∗</td></tr><tr><td class="align_left">User-Agent: Mozilla 4.0 (compatible; MSIE 6.0; Windows NT 5.1)</td><td class="align_center">User-Agent: Mozilla ∗ (compatible; MSIE ∗ Windows NT ∗</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>HTTP header field information and template comparison.</div>

Security and Communication Networks

tab2

Table 2

Table 2: Using XGBoost to Discover Infected Hosts Based on HTTP Traffic 