Automatically detecting vulnerable websites before they turn malicious

Proceedings of the 23rd USENIX Security Symposium

Volumn , Issue , 2014, Pages 625-640

  Soska, Kyle ^a   Christin, Nicolas ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA MINING; WEB DESIGN;

ATTACK TRENDS; CLASSIFICATION SYSTEM; DESIGN SYSTEMS; DETECTION ACCURACY; HIGH-ACCURACY; RECENT RESEARCHES;

WEBSITES;

EID: 84910659777     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (39)

1. Alexa Web Information Service. http://aws.amazon.com/awis/.
2. DNS-BH: Malware domain blocklist. http://www.malwaredomains.com/.
3. Norton safe web. http://safeweb.norton.com.
4. Scrapy: An open source web scraping framework for Python. http://scrapy.org.
5. Stop badware: A nonprofit organization that makes the Web safer through the prevention, remediation and mitigation of badware websites. https://www.stopbadware.org/.
6. M. Bailey, J. Oberheide, J. Andersen, Z. Mao, F. Jahanian, and J. Nazario. Automated classification and analysis of internet malware. In Proc. RAID'07, pages 178-197, Gold Coast, Australia, 2007.
7. U. Bayer, P. Comparetti, C. Hlauschek, C. Kruegel, and E. Kirda. Scalable, behavior-based malware clustering. In Proc. NDSS'09, San Diego, CA, February 2009.
8. K. Borgolte, C. Kruegel, and G. Vigna. Delta: automatic identification of unknown web-based infection campaigns. In Proc. ACM CCS'13, pages 109-120, Berlin, Germany, November 2013.
9. L. Breslau, P. Cao, L. Fan, G. Philips, and S. Shenker. Web caching and Zipf-like distributions: Evidence and implications. In Proc. IEEE INFOCOM'99, pages 126-134, New York, NY, March 1999.
10. D. Chakrabarti, R. Kumar, and K. Punera. Pagelevel template detection via isotonic smoothing. In Proc. WWW'07, pages 61-70, Banff, Canada, May 2007.
11. S. Debnath, P. Mitra, N. Pal, and C.L. Giles. Automatic identification of informative sections of web pages. IEEE Transactions on Knowledge and Data Engineering, 17(9):1233-1246, 2005.
12. G. Forman. An extensive empirical study of feature selection metrics for text classification. The Journal of machine learning research, 3:1289-1305, 2003.
13. J. Gao, W. Fan, J. Han, and P. Yu. A general framework for mining concept-drifting data streams with skewed distributions. In Proc. SIAM SDM'07, pages 3-14, Mineapolis, MN, April 2007.
14. Google. Google Safe Browsing API. https://code.google.com/apis/safebrowsing/.
15. L. Invernizzi, P. Comparetti, S. Benvenuti, C. Kruegel, M. Cova, and G. Vigna. Evilseed: A guided approach to finding malicious web pages. In Proc. 2012 IEEE Symp. Sec. & Privacy, pages 428-442, San Francisco, CA, May 2012.
16. J. Jang, D. Brumley, and S. Venkataraman. Bit-shred: Feature hashing malware for scalable triage and semantic analysis. In Proc. ACM CCS'11, Chicago, IL, October 2011.
17. J. John, F. Yu, Y. Xie, M. Abadi, and A. Krishnamurthy. deSEO: Combating search-result poisoning. In Proc. USENIX Security'11, San Francisco, CA, August 2011.
18. L. Lancor and R. Workman. Using Google hacking to enhance defense strategies. ACM SIGCSE Bulletin, 39(1):491-495, 2007.
19. N. Leontiadis, T. Moore, and N. Christin. A nearly four-year longitudinal study of search-engine poisoning. Tech. Rep. CyLab-14-008, Carnegie Mellon University. July 2014.
20. N. Leontiadis, T. Moore, and N. Christin. Measuring and analyzing search-redirection attacks in the illicit online prescription drug trade. In Proc. USENIX Security'11, San Francisco, CA, August 2011.
21. K. Levchenko, N. Chachra, B. Enright, M. Felegyhazi, C. Grier, T. Halvorson, C. Kanich, C. Kreibich, H. Liu, D. McCoy, A. Pitsillidis, N. Weaver, V. Paxson, G. Voelker, and S. Savage. Click trajectories: End-to-end analysis of the spam value chain. In Proc. 2011 IEEE Symp. Sec. & Privacy, Oakland, CA, May 2011.
22. L. Lu, R. Perdisci, and W. Lee. SURF: Detecting and measuring search poisoning. In Proc. ACM CCS 2011, Chicago, IL, October 2011.
23. MalwareBytes. hphosts online. http://www.hosts-file.net/.
24. McAfee. Site Advisor. http://www.siteadvisor.com/.
25. D. McCoy, A. Pitsillidis, G. Jordan, N. Weaver, C. Kreibich, B. Krebs, G. Voelker, S. Savage, and K. Levchenko. Pharmaleaks: Understanding the business of online pharmaceutical affiliate programs. In Proc. USENIX Security'12, Bellevue, WA, August 2012.
26. J. P. McDermott. Attack net penetration testing. In Proceedings of the 2000 workshop on New security paradigms - NSPW '00, pages 15-21, New York, New York, USA, 2000.
27. J. Mirkovic, S. Dietrich, D. Dittrich, and P. Reiher. Internet Denial of Service: Attack and Defense Mechanisms. Prentice Hall PTR, 2004.
28. PhishTank. https://www.phishtank.com/.
29. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose. All your iFrames point to us. In Proc. USENIX Security'08, San Jose, CA, August 2008.
30. Foster Provost and Tom Fawcett. Robust classification for imprecise environments. Machine Learning, 42(3):203-231, 2001.
31. J. R. Quinlan. C4. 5: programs for machine learning, Volume 1. Morgan Kaufmann, 1993.
32. Ruihua Song, Haifeng Liu, Ji-Rong Wen, and Wei-Ying Ma. Learning block importance models for web pages. In Proc. WWW'04, pages 203-211, New York, NY, May 2004.
33. Sophos. Security threat report 2013, 2013. http://www.sophos.com/en-us/medialibrary/PDFs/other/sophossecuritythreatreport2013.pdf.
34. The Internet Archive. Wayback machine. https://archive.org/web/.
35. M. Vasek and T. Moore. Identifying Risk Factors for Webserver Compromise. In Proc. Financial Crypto.'14, Accra Beach, Barbados, February 2014.
36. D. Wang, G. Voelker, and S. Savage. Juice: A longitudinal study of an SEO botnet. In Proc. NDSS'13, San Diego, CA, February 2013.
37. G. Widmer and M. Kubat. Learning in the presence of concept drift and hidden contexts. Machine learning, 01:69-101, 1996.
38. L. Yi, B. Liu, and X. Li. Eliminating noisy information in web pages for data mining. In Proc. ACM KDD'03, pages 296-305, Washington, DC, August 2003.
39. Y. Zhai and B. Liu. Web data extraction based on partial tree alignment. In Proc. WWW'05, pages 76-85, Chiba, Japan, May 2005.