Analyzing new features of infected web content in detection of malicious web pages

Nezhad Hajian, Majid Vafaei Jahan, Mohammadhassan Tayaraninajaran, Z. Sadrnezhad

Research output: Contribution to journalArticlepeer-review

581 Downloads (Pure)

Abstract

Recent improvements in web standards and technologies enable the attackers to hide and obfuscate infectious codes with new methods and thus escaping the security filters. In this paper, we study the application of machine learning techniques in detecting malicious web pages. In order to detect malicious web pages, we propose and analyze a novel set of features including HTML, JavaScript (jQuery library) and XSS attacks. The proposed features are evaluated on a data set that is gathered by a crawler from malicious web domains, IP and address black lists. For the purpose of evaluation, we use a number of machine learning algorithms. Experimental results show that using the proposed set of features, the C4.5-Tree algorithm offers the best performance with 97.61% accuracy, and F1-measure has 96.75% accuracy. We also rank the quality of the features. Experimental results suggest that nine of the proposed features are among the twenty best discriminative features.
Original languageEnglish
Article number7
Number of pages161
JournalISC International Journal of Information Security (ISeCure)
Volume9
Issue number2
DOIs
Publication statusPublished - 1 May 2017

Fingerprint

Dive into the research topics of 'Analyzing new features of infected web content in detection of malicious web pages'. Together they form a unique fingerprint.

Cite this