A machine-learning framework for supporting intelligent web-phishing detection and analysis

This paper proposes a machine-learning framework for supporting intelligent web phishing detection and analysis, and provides its experimental evaluation. In particular we make use of state-of-the-art decision tree algorithms for detecting whether a Web site is able to perform phishing activities. If this is the case, the Web site is classified as a Web-phishing site. Our experimental evaluation confirms the benefits of applying machine learning methods to the well-known web-phishing detection problem.

[1]  Lorrie Faith Cranor,et al.  You've been warned: an empirical study of the effectiveness of web browser phishing warnings , 2008, CHI.

[2]  Antonella Santone,et al.  Diabetes Mellitus Affected Patients Classification and Diagnosis through Machine Learning Techniques , 2017, KES.

[3]  Ching-Hsien Hsu,et al.  On improvement of cloud virtual machine availability with virtualization fault tolerance mechanism , 2011, 2011 IEEE Third International Conference on Cloud Computing Technology and Science.

[4]  Xiaosong Zhang,et al.  Website Fingerprinting Attack on Anonymity Networks Based on Profile Hidden Markov Model , 2017, IEEE Transactions on Information Forensics and Security.

[5]  Lorrie Faith Cranor,et al.  Cantina: a content-based approach to detecting phishing web sites , 2007, WWW '07.

[6]  J. Palous,et al.  Machine Learning and Data Mining , 2002 .

[7]  Paul Zikopoulos,et al.  Understanding Big Data: Analytics for Enterprise Class Hadoop and Streaming Data , 2011 .

[8]  Gerardo Canfora,et al.  Metamorphic Malware Detection Using Code Metrics , 2014, Inf. Secur. J. A Glob. Perspect..

[9]  Antonella Santone,et al.  Identification of Android Malware Families with Model Checking , 2016, ICISSP.

[10]  Sherin M. Moussa,et al.  Privacy-preserving tabular data publishing: A comprehensive evaluation from web to cloud , 2018, Comput. Secur..

[11]  Shiuh-Pyng Shieh,et al.  Web Application Security: Threats, Countermeasures, and Pitfalls , 2017, Computer.

[12]  Hui Zhang,et al.  The Big Data Analysis of the Next Generation Video Surveillance System for Public Security , 2015, WEB.

[13]  Aniello Cimitile,et al.  Mobile Malware Detection in the Real World , 2016, 2016 IEEE/ACM 38th International Conference on Software Engineering Companion (ICSE-C).

[14]  Michal Choras,et al.  Packets tokenization methods for web layer cyber security , 2017, Logic Journal of the IGPL.

[15]  Fabio Martinelli,et al.  Evaluating Convolutional Neural Network for Effective Mobile Malware Detection , 2017, KES.

[16]  Alfredo Cuzzocrea,et al.  Applying Machine Learning Techniques to Detect and Analyze Web Phishing Attacks , 2018, iiWAS.

[17]  Arnon Rungsawang,et al.  Using Domain Top-page Similarity Feature in Machine Learning-Based Web Phishing Detection , 2010, 2010 Third International Conference on Knowledge Discovery and Data Mining.

[18]  Carolyn Penstein Rosé,et al.  CANTINA+: A Feature-Rich Machine Learning Framework for Detecting Phishing Web Sites , 2011, TSEC.

[19]  Igor V. Kotenko,et al.  Applying Big Data Processing and Machine Learning Methods for Mobile Internet of Things Security Monitoring , 2018, J. Internet Serv. Inf. Secur..

[20]  Laurence T. Yang,et al.  Big Data - Algorithms, Analytics, and Applications , 2015 .

[21]  Miguel Correia,et al.  Benchmarking Static Analysis Tools for Web Security , 2018, IEEE Transactions on Reliability.