Classifying Malicious Web Pages by Using an Adaptive Support Vector Machine

In order to classify a web page as being benign or malicious, we designed 14basic and 16 extended features. The basic features that we implemented were selected to represent the essential characteristics of a web page. The system heuristically combines two basic features into one extended feature in...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:Journal of Information Processing Systems 2013, 9(3), 29, pp.395-404
Hauptverfasser: Hwang, Young Sup, Kwon, Jin Baek, Moon, Jae Chan, Cho, Seong Je
Format: Artikel
Sprache:eng
Schlagworte:
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:In order to classify a web page as being benign or malicious, we designed 14basic and 16 extended features. The basic features that we implemented were selected to represent the essential characteristics of a web page. The system heuristically combines two basic features into one extended feature in order to effectively distinguish benign and malicious pages. The support vector machine can be trained to successfully classify pages by using these features. Because more and more malicious web pages are appearing, and they change so rapidly, classifiers that are trained by old data may misclassify some new pages. To overcome this problem, we selected an adaptive support vector machine (aSVM) as a classifier. The aSVM can learn training data and can quickly learn additional training data based on the support vectors it obtained during its previous learning session. Experimental results verified that the aSVM can classify malicious web pages adaptively. KCI Citation Count: 2
ISSN:1976-913X
2092-805X
DOI:10.3745/JIPS.2013.9.3.395