{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,24]],"date-time":"2026-06-24T17:15:30Z","timestamp":1782321330839,"version":"3.54.5"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031764585","type":"print"},{"value":"9783031764592","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-76459-2_3","type":"book-chapter","created":{"date-parts":[[2025,3,10]],"date-time":"2025-03-10T16:33:11Z","timestamp":1741624391000},"page":"23-33","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["ModSec-Learn: Boosting ModSecurity with\u00a0Machine Learning"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-7756-6125","authenticated-orcid":false,"given":"Christian","family":"Scano","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7000-5260","authenticated-orcid":false,"given":"Giuseppe","family":"Floris","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-6870-8075","authenticated-orcid":false,"given":"Biagio","family":"Montaruli","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5104-1476","authenticated-orcid":false,"given":"Luca","family":"Demetrio","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7771-2485","authenticated-orcid":false,"given":"Andrea","family":"Valenza","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-1072-4352","authenticated-orcid":false,"given":"Luca","family":"Compagna","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7970-5959","authenticated-orcid":false,"given":"Davide","family":"Ariu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2130-9598","authenticated-orcid":false,"given":"Luca","family":"Piras","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5957-6213","authenticated-orcid":false,"given":"Davide","family":"Balzarotti","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7752-509X","authenticated-orcid":false,"given":"Battista","family":"Biggio","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,3,11]]},"reference":[{"issue":"3","key":"3_CR1","doi-asserted-by":"publisher","first-page":"733","DOI":"10.1109\/TR.2018.2805763","volume":"67","author":"D Appelt","year":"2018","unstructured":"Appelt, D., Nguyen, C.D., Panichella, A., Briand, L.C.: A machine-learning-driven evolutionary approach for testing web application firewalls. IEEE Trans. Reliab. 67(3), 733\u2013757 (2018)","journal-title":"IEEE Trans. Reliab."},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Appelt, D., Panichella, A., Briand, L.: Automatically repairing web application firewalls based on successful SQL injection attacks. In: 2017 IEEE 28th International Symposium on Software Reliability Engineering (ISSRE), pp. 339\u2013350 (2017)","DOI":"10.1109\/ISSRE.2017.28"},{"key":"3_CR3","doi-asserted-by":"crossref","unstructured":"Applebaum, S., Gaber, T., Ahmed, A.: Signature-based and machine-learning-based web application firewalls: a short survey. Procedia Comput. Sci. 189, 359\u2013367 (2021), aI in Computational Linguistics","DOI":"10.1016\/j.procs.2021.05.105"},{"key":"3_CR4","unstructured":"Bishop, C.M. (ed.): Linear Models for Classification, pp. 179\u2013224. Springer (2006)"},{"key":"3_CR5","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45, 5\u201332 (2001)","journal-title":"Mach. Learn."},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Corona, I., et al.: Deltaphish: detecting phishing webpages in compromised websites. In: Computer Security \u2013 ESORICS 2017, pp. 370\u2013388 (2017)","DOI":"10.1007\/978-3-319-66402-6_22"},{"key":"3_CR7","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1007\/BF00994018","volume":"20","author":"C Cortes","year":"1995","unstructured":"Cortes, C., Vapnik, V.: Support-vector networks. Mach. Learn. 20, 273\u2013297 (1995)","journal-title":"Mach. Learn."},{"key":"3_CR8","unstructured":"Defazio, A., Bach, F., Lacoste-Julien, S.: Saga: a fast incremental gradient method with support for non-strongly convex composite objectives (2014)"},{"key":"3_CR9","doi-asserted-by":"publisher","first-page":"711","DOI":"10.1109\/TDSC.2017.2700270","volume":"16","author":"A Demontis","year":"2017","unstructured":"Demontis, A., et al.: Yes, machine learning can be more secure! a case study on android malware detection. IEEE Trans. Dependable Secure Comput. 16, 711\u2013724 (2017)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"3_CR10","unstructured":"Folini, C., Gilli\u00e9ron, F.: A new attempt to combine the CRS with machine learning (2021). https:\/\/coreruleset.org\/2021\/05\/19\/a-new-attempt-to-combine-the-crs-with-machine-learning\/"},{"key":"3_CR11","volume-title":"ModSecurity Handbook","author":"C Folini","year":"2017","unstructured":"Folini, C., Ristic, I.: ModSecurity Handbook, 2nd edn. Second Edition. Feisty Duck, London, GBR (2017)","edition":"2"},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"Fredj, O.B., Cheikhrouhou, O., Krichen, M., Hamam, H., Derhab, A.: An owasp top ten driven survey on web application protection methods. In: Risks and Security of Internet and Systems: 15th International Conference, CRiSIS 2020, pp. 235\u2013252 (2020)","DOI":"10.1007\/978-3-030-68887-5_14"},{"key":"3_CR13","doi-asserted-by":"crossref","unstructured":"Joshi, A., Geetha, V.: SQL injection detection using machine learning. In: 2014 International Conference on Control, Instrumentation, Communication and Computational Technologies (ICCICCT), pp. 1111\u20131115 (2014)","DOI":"10.1109\/ICCICCT.2014.6993127"},{"key":"3_CR14","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1016\/j.cose.2016.04.005","volume":"60","author":"D Kar","year":"2016","unstructured":"Kar, D., Panigrahi, S., Sundararajan, S.: SQLiGoT: detecting SQL injection attacks using graph of tokens and SVM. Comput. Secur. 60, 206\u2013225 (2016)","journal-title":"Comput. Secur."},{"issue":"6","key":"3_CR15","doi-asserted-by":"publisher","first-page":"446","DOI":"10.1007\/s42979-022-01327-2","volume":"3","author":"TCH Nguyen","year":"2022","unstructured":"Nguyen, T.C.H., Le-Nguyen, M.K., Le, D.T., Nguyen, V.H., T\u00f4n, L.P., Nguyen-An, K.: Improving web application firewalls with automatic language detection. SN Comput. Sci. 3(6), 446 (2022)","journal-title":"SN Comput. Sci."},{"key":"3_CR16","unstructured":"OWASP Foundation Inc.: Owasp top 10 (2021). https:\/\/owasp.org\/Top10\/. Accessed 22 Feb 2023"},{"key":"3_CR17","unstructured":"OWASP Foundation Inc.: Owasp core rule set (2023). https:\/\/coreruleset.org"},{"key":"3_CR18","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., et al.: Scikit-learn: machine learning in Python. J. Mach. Learn. Res. 12, 2825\u20132830 (2011)","journal-title":"J. Mach. Learn. Res."},{"key":"3_CR19","doi-asserted-by":"crossref","unstructured":"Singh, J.J., Samuel, H., Zavarsky, P.: Impact of paranoia levels on the effectiveness of the modsecurity web application firewall. In: 2018 1st International Conference on Data Intelligence and Security (ICDIS), pp. 141\u2013144 (2018)","DOI":"10.1109\/ICDIS.2018.00030"},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"Sobola, T.D., Zavarsky, P., Butakov, S.: Experimental study of modsecurity web application firewalls. In: 2020 IEEE 6th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing, (HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS), pp. 209\u2013213 (2020)","DOI":"10.1109\/BigDataSecurity-HPSC-IDS49724.2020.00045"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Tran, N.T., Nguyen, V.H., Nguyen-Le, T., Nguyen-An, K.: Improving modsecurity waf with machine learning methods. In: Future Data and Security Engineering. Big Data, Security and Privacy, Smart City and Industry 4.0 Applications, pp. 93\u2013107. Springer, Singapore (2020)","DOI":"10.1007\/978-981-33-4370-2_7"}],"container-title":["Lecture Notes in Networks and Systems","Distributed Computing and Artificial Intelligence, Special Sessions I, 21st International Conference"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-76459-2_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,10]],"date-time":"2025-03-10T16:33:24Z","timestamp":1741624404000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-76459-2_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031764585","9783031764592"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-76459-2_3","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"value":"2367-3370","type":"print"},{"value":"2367-3389","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"11 March 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DCAI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Distributed Computing and Artificial Intelligence","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Salamanca","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 June 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 June 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dcai2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.dcai-conference.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}