A fuzzy logic approach for detecting redirection spam

Redirection spam is a relatively newer technique whereby spammers redirect the search user to an unwanted webpage or download malware on the victim's machine without his consent. Spammers are making use of chained redirections to hide their nefarious activities. Detecting such malicious redirections is of prime importance for maintaining web security. In this paper, we have identified the factors that assist in detecting redirection spam and propose a fuzzy logic-based model for redirection spam detection. We validated our model against a set of URLs and were able to detect the spammed redirections with high accuracy.

[1]  Fidel Cacheda,et al.  Analysing the Effectiveness of Crawlers on the Client-Side Hidden Web , 2012, PAAMS.

[2]  Ming Ma,et al.  Strider Search Ranger: Towards an Autonomic Anti-Spam Search Engine , 2007, Fourth International Conference on Autonomic Computing (ICAC'07).

[3]  Rohit Khare.  Seventh Heaven: Anatomy of a URL (and Other Internet-Scale Namespaces, Part 1) , 1999, IEEE Internet Comput..

[4]  Fang Yu,et al.  Knowing your enemy: understanding and detecting malicious web advertising , 2012, CCS '12.

[5]  Tyler Moore,et al.  Measuring and Analyzing Search-Redirection Attacks in the Illicit Online Prescription Drug Trade , 2011, USENIX Security Symposium.

[6]  Brian D. Davison,et al.  Cloaking and Redirection: A Preliminary Study , 2005, AIRWeb.

[7]  Jong Kim,et al.  WarningBird: Detecting Suspicious URLs in Twitter Stream , 2012, NDSS.

[8]  Justin Tung Ma,et al.  Learning to detect malicious URLs , 2011, TIST.

[9]  J. Mendel.  Fuzzy logic systems for engineering: a tutorial , 1995, Proc. IEEE.

[10]  Xuxian Jiang,et al.  Automated Web Patrol with Strider HoneyMonkeys: Finding Web Sites That Exploit Browser Vulnerabilities , 2006, NDSS.

[11]  Yuta Takata,et al.  Analysis of Redirection Caused by Web-based Malware , 2011 .

[12]  Laxmi Ahuja,et al.  Approaches for Web Spam Detection , 2014 .

[13]  S. Sivanandam,et al.  Introduction to Fuzzy Logic using MATLAB , 2006 .

[14]  Vern Paxson,et al.  Redirecting DNS for Ads and Profit , 2011, FOCI.

[15]  Bin Zhao,et al.  Malicious web page detection based on on-line learning algorithm , 2011, 2011 International Conference on Machine Learning and Cybernetics.

[16]  Hao Chen,et al.  A Quantitative Study of Forum Spamming Using Context-based Analysis , 2007, NDSS.

[17]  Wang Tao,et al.  A Novel Framework for Learning to Detect Malicious Web Pages , 2010, 2010 International Forum on Information Technology and Applications.

[18]  Antonio Nucci,et al.  Detecting malicious HTTP redirections using trees of user browsing activity , 2014, IEEE INFOCOM 2014 - IEEE Conference on Computer Communications.

[19]  Ross A. Malaga,et al.  Worst practices in search engine optimization , 2008, CACM.

[20]  Lawrence K. Saul,et al.  Beyond blacklists: learning to detect malicious web sites from suspicious URLs , 2009, KDD.

[21]  Komminist Weldemariam,et al.  BINSPECT: Holistic Analysis and Detection of Malicious Web Pages , 2012, SecureComm.

[22]  Dawn Xiaodong Song,et al.  Design and Evaluation of a Real-Time URL Spam Filtering Service , 2011, 2011 IEEE Symposium on Security and Privacy.

[23]  András A. Benczúr,et al.  SpamRank -- Fully Automatic Link Spam Detection , 2005, AIRWeb.

[24]  Giovanni Vigna,et al.  Prophiler: a fast filter for the large-scale detection of malicious web pages , 2011, WWW.

[25]  Hao Chen,et al.  Spam double-funnel: connecting web spammers with advertisers , 2007, WWW '07.

[26]  Jingyu Zhou,et al.  An Analysis of URLs Generated from JavaScript Code , 2012, 2012 IEEE/ACIS 11th International Conference on Computer and Information Science.

[27]  Kouichi Sakurai,et al.  Proactive Blacklisting for Malicious Web Sites by Reputation Evaluation Based on Domain and IP Address Registration , 2011, 2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications.

[28]  Hector Garcia-Molina,et al.  Spam: it's not just for inboxes anymore , 2005, Computer.

[29]  Wenke Lee,et al.  SURF: detecting and measuring search poisoning , 2011, CCS '11.

[30]  Krishna Bhargrava,et al.  A Study of URL Redirection Indicating Spam , 2009 .