Enhancing Malicious URL Detection: A Novel Framework Leveraging Priority Coefficient and Feature Evaluation

被引:2
作者
Rafsanjani, Ahmad Sahban [1 ]
Binti Kamaruddin, Norshaliza [2 ]
Behjati, Mehran [1 ]
Aslam, Saad [1 ]
Sarfaraz, Aaliya [1 ]
Amphawan, Angela [1 ,3 ]
机构
[1] Sunway Univ, Sch Engn & Technol, Bandar Sunway 47500, Selangor Darul, Malaysia
[2] Univ Teknol Malaysia, Fac Artificial Intelligence, Kuala Lumpur 54100, Malaysia
[3] Sunway Univ, Sch Engn & Technol, Smart Photon Res Lab, Subang Jaya 47500, Selangor, Malaysia
来源
IEEE ACCESS | 2024年 / 12卷
关键词
Malicious URL detection; phishing; malware; network security; feature extraction; cyber threats; machine learning; NETWORK;
D O I
10.1109/ACCESS.2024.3412331
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Malicious Uniform Resource Locators (URLs) pose a significant cybersecurity threat by carrying out attacks such as phishing and malware propagation. Conventional malicious URL detection methods, relying on blacklists and heuristics, often struggle to identify new and obfuscated malicious URLs. To address this challenge, machine learning and deep learning have been leveraged to enhance detection capabilities, albeit relying heavily on large and frequently updated datasets. Furthermore, the efficacy of these methods is intrinsically tied to the quality of the training data, a requirement that becomes increasingly challenging to fulfill in real-world scenarios due to constraints such as data scarcity and the dynamic nature of evolving cyber threats. In this study, we introduce an innovative framework for malicious URL detection based on predefined static feature classification by allocating priority coefficients and feature evaluation methods. Our feature classification encompasses 42 classes, including blacklist, lexical, host-based, and content-based features. To validate our framework, we collected a dataset of 5000 real-world URLs from prominent phishing and malware websites, namely URLhaus and PhishTank. We assessed our framework's performance using three supervised machine learning methods: Support Vector Machine (SVM), Random Forest (RF), and Bayesian Network (BN). The results demonstrate that our framework outperforms these methods, achieving an impressive detection accuracy of 98.95% and a precision value of 98.60%. Furthermore, we conducted a benchmarking analysis against three comprehensive malicious URL detection methods (PDRCNN, the Li method, and URLNet), demonstrating that our proposed framework excels in terms of accuracy and precision. In conclusion, our novel malicious URL detection framework substantially enhances accuracy, significantly bolstering cybersecurity defenses against emerging threats.
引用
收藏
页码:85001 / 85026
页数:26
相关论文
共 101 条
  • [81] Comprehensive review and analysis of anti-malware apps for smartphones
    Talal, Mohammed
    Zaidan, A. A.
    Zaidan, B. B.
    Albahri, O. S.
    Alsalem, M. A.
    Albahri, A. S.
    Alamoodi, A. H.
    Kiah, M. L. M.
    Jumaah, F. M.
    Alaa, Mussab
    [J]. TELECOMMUNICATION SYSTEMS, 2019, 72 (02) : 285 - 337
  • [82] Adaptive Malicious URL Detection: Learning in the Presence of Concept Drifts
    Tan, Guolin
    Zhang, Peng
    Liu, Qingyun
    Liu, Xinran
    Zhu, Chunge
    Dou, Fenghu
    [J]. 2018 17TH IEEE INTERNATIONAL CONFERENCE ON TRUST, SECURITY AND PRIVACY IN COMPUTING AND COMMUNICATIONS (IEEE TRUSTCOM) / 12TH IEEE INTERNATIONAL CONFERENCE ON BIG DATA SCIENCE AND ENGINEERING (IEEE BIGDATASE), 2018, : 737 - 743
  • [83] Exploring Efficiency of Character-level Convolution Neuron Network and Long Short Term Memory on Malicious URL Detection
    Thuy Thi Thanh Pham
    Van Nam Hoang
    Thanh Ngoc Ha
    [J]. PROCEEDINGS OF 2018 VII INTERNATIONAL CONFERENCE ON NETWORK, COMMUNICATION AND COMPUTING (ICNCC 2018), 2018, : 82 - 86
  • [84] Turkish J., 2021, Comput. Math. Educ.(TURCOMAT), V12, P68
  • [85] Ulevitch D, PhishTank
  • [86] Ulevitch D, 2023, PhishTank
  • [87] URLhaus, 2023, About us
  • [88] Vundavalli F., 2020, P 13 INT C SEC INF N, P1
  • [89] Wang S. Li, 2020, P INT S SEC PRIV SOC, P34
  • [90] PDRCNN: Precise Phishing Detection with Recurrent Convolutional Neural Networks
    Wang, Weiping
    Zhang, Feng
    Luo, Xi
    Zhang, Shigeng
    [J]. SECURITY AND COMMUNICATION NETWORKS, 2019, 2019