HTTP-Based APT Malware Infection Detection Using URL Correlation Analysis

Table 3

Change of uncorrelated requests during experiment.

Experiment step	Normal (%)	Malicious (%)
Construct web request graphs	6.02	19.84
Refine web request graphs	5.20	19.47
Normal uncorrelated request filter	0.87	19.01