{'fraction_non_alphanumeric': 0.026622296173044926, 'fraction_numerical': 0.0, 'mean_word_length': 5.473118279569892, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Low-Level Network Attack Recognition : A Signature-Based Approach ∗

This research presents a new method for detecting network attacks based on network traffic signatures. It is part of a survivability architecture, which focuses on attack recognition, fault-tolerance and recovery after malicious acts. The attack recognition portion emphasizes low-level analysis of network traffic, high efficiency, real-time operation, and accurate identification of attacks. Attack recognition is based on the analysis of TCP protocol flags with respect to specific attacks and is characterized by its simplicity.