作者
Daiki Chiba, Kazuhiro Tobe, Tatsuya Mori, Shigeki Goto
发表日期
2012/7/16
研讨会论文
2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet
页码范围
29-39
出版商
IEEE
简介
Web-based malware attacks have become one of the most serious threats that need to be addressed urgently. Several approaches that have attracted attention as promising ways of detecting such malware include employing various blacklists. However, these conventional approaches often fail to detect new attacks owing to the versatility of malicious websites. Thus, it is difficult to maintain up-to-date blacklists with information regarding new malicious websites. To tackle this problem, we propose a new method for detecting malicious websites using the characteristics of IP addresses. Our approach leverages the empirical observation that IP addresses are more stable than other metrics such as URL and DNS. While the strings that form URLs or domain names are highly variable, IP addresses are less variable, i.e., IPv4 address space is mapped onto 4-bytes strings. We develop a lightweight and scalable detection …
学术搜索中的文章
D Chiba, K Tobe, T Mori, S Goto - 2012 IEEE/IPSJ 12th International Symposium on …, 2012