An efficient malicious webpage static detection framework based on optimized Bayesian and hybrid machine learning

被引:0
作者
Yang, Fan [1 ]
Zhu, Chaoqun [1 ]
Xu, Heng [1 ]
Qian, Yongfeng [1 ]
Song, Jun [1 ]
机构
[1] China Univ Geosci, Sch Comp Sci, Wuhan, Peoples R China
基金
中国国家自然科学基金;
关键词
feature extraction; machine learning; malicious webpage detection; threat assessment; WEB PAGE; CODE;
D O I
10.1002/cpe.6792
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Malicious webpage detection is a crucial work in both theory and practical environment. In practical applications, static detection methods are usually regarded as a priority choice, which can quickly detect unknown malicious web pages and avoid a costly in-depth analysis. However, existing solution of static detection typically has the following problems. For example, a single static detection may lead to a higher false positive rate, and the integrated detection usually has a lower detection efficiency. In this article, we propose an efficient webpage static detection framework, especially considering both the detection efficiency and the detection accuracy. Then, on the basis of the extended feature sets from URL, HTML, and JavaScript, we introduce an optimized naive Bayesian algorithm, in which a novel amplification factor strategy is proposed. Finally, a webpage threat assessment model oriented to general machine learning is presented to achieve the refined detection. Three main properties are provided: high detection efficiency, high detection accuracy, and better applicability. Furthermore, the comprehensive experimental results and comparative analysis is given to show the advantages of the proposed framework.
引用
收藏
页数:15
相关论文
共 44 条
[41]   Detection of malicious web pages based on hybrid analysis [J].
Wang, Rong ;
Zhu, Yan ;
Tan, Jiefan ;
Zhou, Binbin .
JOURNAL OF INFORMATION SECURITY AND APPLICATIONS, 2017, 35 :68-74
[42]   TSMWD: A High-speed Malicious Web Page Detection System Based on Two-Step Classifiers [J].
Wang, Zhengqi ;
Feng, Xiaobing ;
Niu, Yukun ;
Zhang, Chi ;
Su, Jue .
2017 INTERNATIONAL CONFERENCE ON NETWORKING AND NETWORK APPLICATIONS (NANA), 2017, :170-175
[43]  
Yang Yang, 2009, Computer Engineering and Applications, V45, P94, DOI 10.3778/j.issn.1002-8331.2009.03.027
[44]  
Zhang SY, 2014, INT CONF CLOUD COMPU, P394, DOI 10.1109/CCIS.2014.7175767