웹사이트 특징을 이용한 휴리스틱 피싱 탐지 방안 연구
Phishing Detection Methodology Using Web Sites Heuristic
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
웹을 이용하는 사용자가 증가함에 따라 피싱 공격이 점차 증가하고 있다. 다양한 피싱 공격에 효과적으로 대응하기 위해서는 피싱 공격에 대한 올바른 이해가 필요하며 적절한 대응 방법을 활용할 수 있어야 한다. 이를 위해 본 논문에서는 피싱 공격의 절차를 접근 유도 단계와 공격 실행 단계로 정의하고 각 단계에서 발생하는 피싱 공격의 유형을 분석한다. 이와 같은 분석을 통해 피싱 공격에 대한 인식을 재고하고 피싱 공격의 피해를 사전에 예방할 수 있다. 또한, 분석된 내용을 기반으로 각 피싱 유형에 대한 대응 방안을 제시한다. 제안하는대응 방안은 각 단계별로 적합한 웹사이트 특징을 활용한 방식이다. 대응 방안의 유효성을 판단하기 위하여 제안한 특징 추출 방안을 통해휴리스틱 기반 악성 사이트 분류 모델을 생성하고 각 모델의 정확도를 검증한다. 결론적으로 본 논문에서 제안하는 방안은 안티 피싱 기술을 강화하는 기초가 되고 웹사이트 보안 강화의 기반이 된다.
Abstract
In recent year, phishing attacks are flooding with services based on the web technology. Phishing is affecting online security significantly day by day with the vulnerability of web pages. To prevent phishing attacks, a lot of anti-phishing techniques has been made with their own advantages and dis-advantages respectively, but the phishing attack has not been eradicated completely yet. In this paper, we have studied phishing in detail and categorize a process of phishing attack in two parts - Landing-phase, Attack-phase. In addition, we propose an phishing detection methodology based on web sites heuristic. To extract web sites features, we focus on URL and source codes of web sites. To evaluate performance of the suggested method, set up an experiment and analyze its results. Our methodology indicates the detection accuracy of 98.9% with random forest algorithm. The evaluation of proof-ofconcept reveals that web site features can be used for phishing detection.
참고문헌 (36)
- "Korea Internet and Security Agency"[URL]
- "Korea Internet and Security Agency" (2014)[URL]
- "Korea Communications Commission"[URL]
- APWG, "Phishing Activity Trends Report 1st Quarter 2014", ~ (2014)
- APWG, "Global Phishing Survey : Trends and Domain Name Use in 1H2014", ~ (2014)
- "Telecommunications Technology Association"[URL]
- Gaurav Kumar Chaudhary, "Development Review on Phishing:A Computer Security Threat", International Journal of Advance Research in Computer Science and Management Studies, 2(8), pp.55~64 (2014)
- M. Nazreen Banu, "A Comprehensive Study of Phishing Attacks", International Journal of Computer Science and Information Technologies, 4(6), pp.783~786 (2013)
- Spear-Phishing Email: Most Favored APT Attack Bait, "Trend Micro Inc.", Trend Micro Incorporated, ~ (2012)
- "Joongang Ilbo"[URL]
- Thomas Nagunwa, "Behind Identity Theft and Fraud in Cyberspace: The Current Landscape of Phishing Vectors", International Journal of Cyber-Security and Digital Forensics (IJCSDF), 3(1), pp.72~83 (2014)
- PG Research Group, "The Web Identity Prevention:Factors to Consider in The Anti-Phishing Design", International Journal of Engineering Science and Technology, 2(7), pp.2807~2812 (2010)
- JooHyung Oh, "Technical Trends and Response Methods of Drive-by Download", Communications of the Korean Institute of Information Scientists and Engineer, 28(11), pp.112~116 (2010)
- "Man-in-themiddle attack"[URL]
- "Korea Internet and Security Agency, KISA"[URL]
- "INTERNET & SECURIT Y FOCUS" (2015)[URL]
- Guang Xiang, "Cantina+: A feature-rich machine learning framework for detecting phishing web sites", ACM Transactions on Information and System Security (TISSEC), 14(2), pp.21~ (2011)
- Imtithal A. Saeed, "A Survey on Malware and Malware Detection Systems", International Journal of Computer Applications, 67(16), pp.25~31 (2013)
- Luong Anh Tuan Nguyen, "A novel approach for phishing detection using URL-based heuristic", Computing, Management and Telecommunications (ComManTel), 2014International Conference on. IEEE, pp.298~303 (2014)
- Firdous Kausar, "Hybrid Client Side Phishing Websites Detection Approach", International Journal of Advanced Computer Science and Applications (IJACSA), 5(7), pp.132~140 (2014)
- A. Naga Venkata Sunil, "A pagerank based detection technique for phishing web sites", Computers & Informatics(ISCI), 2012 IEEE Symposium on. IEEE, pp.58~63 (2012)
- Neda Abdelhamid, "Phishing detection based Associative Classification data mining", Expert Systems with Applications, 41(13), pp.5948~5959 (2014)
- R. Gowtham, "A comprehensive and efficacious architecture for detecting phishing webpages", Computers & Security, 40, pp.23~37 (2014)
- Davide Canali, "Prophiler: a fast filter for the largescale detection of malicious web pages", Proceedings of the 20th international conference on World Wide Web, ACM, pp.197~206 (2011)
- Ammar Almomani, "A survey of phishing email filtering techniques", IEEE Communications Surveys &Tutorials, 15(4), pp.2070~2090 (2013)
- Rami M. Mohammad, "Intelligent rule-based phishing websites classification", The Institution of Engineering and Technology. Information Security, 8(3), pp.153~160 (2014)
- H. B. Kazemian, "Comparisons of machine learning techniques for detecting malicious webpages", Expert Systems with Applications, 42(3), pp.1166~1177 (2015)
- Yue Zhang, "Cantina: a content-based approach to detecting phishing web sites", WWW ’07 Proceedings of the 16th international conference on World Wide Web. ACM, pp.639~648 (2007)
- Christian Ludl, "On the effectiveness of techniques to detect phishing sites", Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA 2007), pp.20~39 (2007)
- 황영섭, "Classifying Malicious Web Pages by Using an Adaptive Support Vector Machine", JIPS(Journal of Information Processing Systems), 9(3), pp.395~404 (2013), 한국정보처리학회[DOI]
- Ram Basnet, "Soft Computing Applications in Industry", pp.373~383 (2008), Springer Berlin Heidelberg
- Vibhuti Patel, "Safe Internet Browsing Using Heuristic Based Technique", International Journal of Engineering Development and Research(IJEDR), 2(2), pp.1759~1766 (2014)
- Yung-Tsung Hou, "Malicious web content detection by machine learning", Expert Systems with Applications, 37(1), pp.55~60 (2010)
- Colin Whittaker, "Large-Scale Automatic Classification of Phishing Pages", NDSS, Vol.10, ~ (2010)
- V. Santhana Lakshmi, "Efficient prediction of phishing websites using supervised learning algorithms", Procedia Engineering, 30, pp.798~805 (2012)
- Albert Hung-Ren Ko, "Single Classifierbased Multiple Classification Scheme for weak classifiers:An experimental comparison", Expert Systems with Applications, 40(9), pp.3606~3622 (2013)