BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks

Figure 5

Visualisation of unknown -grams in the application layer messages and outputs of the recurrent layer for each time step. It shows how the proposed system observes and analyses the traffic. Yellow blocks show unknown -grams. Red blocks show the probability of the traffic being malicious when reading an -gram at that point.