A Web Attack Detection Method Based on DistilBERT and Feature Fusion for Power Micro-Application Server

The widespread use of power micro-applications has significantly expanded the attack surface of their server side, thus increasing the risk of vulnerability attacks such as SQL injection, XSS, and CRLF injection. To ensure the security of power systems, these attacks must be detected precisely and timely. Therefore, this paper proposes a server-side web attack detection method based on DistilBERT and feature fusion for HTTP and HTTPS requests. The method treats HTTP and HTTPS requests as text data, specifically, extracts deep semantic features using DistilBERT, and fuses them with well-designed empirical features to comprehensively characterize and classify the request. Consequently, anomalous requests can be detected. The experimental results show that the accuracy, precision, recall, and F1 score of the method on HTTP CSIC 2010 and FWAF datasets are close to or higher than 99%. Compared with other methods as far as we known, this method has better performance and efficiency.