Johnson an incident handler is working on a recent web application attack faced by the organization. As part of this process, he performed data preprocessing in order to analyzing and detecting the…

Question

Options

• AFiltering invalid host names
• BIdentifying unpopular domains
• CHost name normalization
• DUser-specific sessionization

• A
  4% (1)
• B
  11% (3)
• C
  4% (1)
• D
  81% (22)

Explanation

The data preprocessing step performed by Johnson, where he analyzes user activities within a certain time period to create time-ordered domain sequences for further analysis on sequential patterns, is known as user-specific sessionization. This process involves aggregating all user activities and requests into discrete sessions based on the individual user, allowing for a coherent analysis of user behavior over time. This is critical for identifying patterns that may indicate a watering hole attack, where attackers compromise a site frequently visited by the target group to distribute malware. User-specific sessionization helps in isolating and examining sequences of actions taken by users, making it easier to detect anomalies or patterns indicative of such an

No community discussion yet for this question.