An Improved Feature Extraction Approach for Web Anomaly Detection Based on Semantic Structure

Figure 2

An example that illustrates the processing of splitting. By using this method, we divide those four types of URLs (as shown in Table 1) into four subgroups. Each URL in subgroups has the same basic structure and requests the same resource. Thus, the URLs in each subgroup are balanced.