Title

Detection and Analysis of Drive-by Downloads and Malicious Websites

Source of Publication

Communications in Computer and Information Science

Abstract

© Springer Nature Singapore Pte Ltd. 2020. A drive-by download is a download that occurs without user’s action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victim’s machine. Moreover, the downloaded file can be camouflaged as an installer that would further install malicious software. Drive-by downloads is a very good example of the exponential increase in malicious activity over the Internet and how it affects the daily use of the web. In this paper, we try to address the problem caused by drive-by downloads from different standpoints. We provide in-depth understanding of the difficulties in dealing with drive-by downloads and suggest appropriate solutions. We propose machine learning and feature selection solutions to remedy the drive-by download problem. Experimental results reported 98.2% precision, 98.2% F-Measure and 97.2% ROC area.

Document Type

Conference Proceeding

ISBN

['9789811548246']

First Page

72

Last Page

86

Publication Date

1-1-2020

DOI

10.1007/978-981-15-4825-3_6

Link to Full Text

Share

COinS