University of Hertfordshire

By the same authors

Documents

View graph of relations
Original languageEnglish
Article number7
Number of pages161
JournalThe ISC International Journal of Information Security
Journal publication date1 May 2017
Volume9
Issue2
DOIs
Publication statusPublished - 1 May 2017

Abstract

Recent improvements in web standards and technologies enable the attackers to hide and obfuscate infectious codes with new methods and thus escaping the security filters. In this paper, we study the application of machine learning techniques in detecting malicious web pages. In order to detect malicious web pages, we propose and analyze a novel set of features including HTML, JavaScript (jQuery library) and XSS attacks. The proposed features are evaluated on a data set that is gathered by a crawler from malicious web domains, IP and address black lists. For the purpose of evaluation, we use a number of machine learning algorithms. Experimental results show that using the proposed set of features, the C4.5-Tree algorithm offers the best performance with 97.61% accuracy, and F1-measure has 96.75% accuracy. We also rank the quality of the features. Experimental results suggest that nine of the proposed features are among the twenty best discriminative features.

Notes

© 2017 ISC. All rights reserved.

ID: 16384139