Detection and Analysis of Drive-by Downloads and Malicious Websites

A drive by download is a download that occurs without users action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victims machine. Moreover, the downloaded file can be camouf...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:arXiv.org 2020-04
Hauptverfasser: Ibrahim, Saeed, Nawwaf Al Herami, Ebrahim Al Naqbi, Aldwairi, Monther
Format: Artikel
Sprache:eng
Schlagworte:
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title arXiv.org
container_volume
creator Ibrahim, Saeed
Nawwaf Al Herami
Ebrahim Al Naqbi
Aldwairi, Monther
description A drive by download is a download that occurs without users action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victims machine. Moreover, the downloaded file can be camouflaged as an installer that would further install malicious software. Drive by downloads is a very good example of the exponential increase in malicious activity over the Internet and how it affects the daily use of the web. In this paper, we try to address the problem caused by drive by downloads from different standpoints. We provide in depth understanding of the difficulties in dealing with drive by downloads and suggest appropriate solutions. We propose machine learning and feature selection solutions to remedy the the drive-by download problem. Experimental results reported 98.2% precision, 98.2% F-Measure and 97.2% ROC area.
format Article
fullrecord <record><control><sourceid>proquest</sourceid><recordid>TN_cdi_proquest_journals_2359092410</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>2359092410</sourcerecordid><originalsourceid>FETCH-proquest_journals_23590924103</originalsourceid><addsrcrecordid>eNqNzMEKgkAQgOElCJLyHRY6C-usVh5Diy7dgo6x6ggry045a-HbF9EDdPovH_9MRKB1muwygIWImXulFGy2kOc6EmWFAZtgyUvjW7n3xk1sWVInq8E-MaknWdHLOzItf8nZONtYGllesWYbkFdi3hnHGP-6FOvj4VKekvtAjxE53Hoah8-Zb6DzQhWQpUr_p97GhDnF</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2359092410</pqid></control><display><type>article</type><title>Detection and Analysis of Drive-by Downloads and Malicious Websites</title><source>Freely Accessible Journals</source><creator>Ibrahim, Saeed ; Nawwaf Al Herami ; Ebrahim Al Naqbi ; Aldwairi, Monther</creator><creatorcontrib>Ibrahim, Saeed ; Nawwaf Al Herami ; Ebrahim Al Naqbi ; Aldwairi, Monther</creatorcontrib><description>A drive by download is a download that occurs without users action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victims machine. Moreover, the downloaded file can be camouflaged as an installer that would further install malicious software. Drive by downloads is a very good example of the exponential increase in malicious activity over the Internet and how it affects the daily use of the web. In this paper, we try to address the problem caused by drive by downloads from different standpoints. We provide in depth understanding of the difficulties in dealing with drive by downloads and suggest appropriate solutions. We propose machine learning and feature selection solutions to remedy the the drive-by download problem. Experimental results reported 98.2% precision, 98.2% F-Measure and 97.2% ROC area.</description><identifier>EISSN: 2331-8422</identifier><language>eng</language><publisher>Ithaca: Cornell University Library, arXiv.org</publisher><subject>Downloading ; Machine learning ; Malware ; Websites</subject><ispartof>arXiv.org, 2020-04</ispartof><rights>2020. This work is published under http://arxiv.org/licenses/nonexclusive-distrib/1.0/ (the “License”). Notwithstanding the ProQuest Terms and Conditions, you may use this content in accordance with the terms of the License.</rights><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><link.rule.ids>776,780</link.rule.ids></links><search><creatorcontrib>Ibrahim, Saeed</creatorcontrib><creatorcontrib>Nawwaf Al Herami</creatorcontrib><creatorcontrib>Ebrahim Al Naqbi</creatorcontrib><creatorcontrib>Aldwairi, Monther</creatorcontrib><title>Detection and Analysis of Drive-by Downloads and Malicious Websites</title><title>arXiv.org</title><description>A drive by download is a download that occurs without users action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victims machine. Moreover, the downloaded file can be camouflaged as an installer that would further install malicious software. Drive by downloads is a very good example of the exponential increase in malicious activity over the Internet and how it affects the daily use of the web. In this paper, we try to address the problem caused by drive by downloads from different standpoints. We provide in depth understanding of the difficulties in dealing with drive by downloads and suggest appropriate solutions. We propose machine learning and feature selection solutions to remedy the the drive-by download problem. Experimental results reported 98.2% precision, 98.2% F-Measure and 97.2% ROC area.</description><subject>Downloading</subject><subject>Machine learning</subject><subject>Malware</subject><subject>Websites</subject><issn>2331-8422</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2020</creationdate><recordtype>article</recordtype><sourceid>BENPR</sourceid><recordid>eNqNzMEKgkAQgOElCJLyHRY6C-usVh5Diy7dgo6x6ggry045a-HbF9EDdPovH_9MRKB1muwygIWImXulFGy2kOc6EmWFAZtgyUvjW7n3xk1sWVInq8E-MaknWdHLOzItf8nZONtYGllesWYbkFdi3hnHGP-6FOvj4VKekvtAjxE53Hoah8-Zb6DzQhWQpUr_p97GhDnF</recordid><startdate>20200409</startdate><enddate>20200409</enddate><creator>Ibrahim, Saeed</creator><creator>Nawwaf Al Herami</creator><creator>Ebrahim Al Naqbi</creator><creator>Aldwairi, Monther</creator><general>Cornell University Library, arXiv.org</general><scope>8FE</scope><scope>8FG</scope><scope>ABJCF</scope><scope>ABUWG</scope><scope>AFKRA</scope><scope>AZQEC</scope><scope>BENPR</scope><scope>BGLVJ</scope><scope>CCPQU</scope><scope>DWQXO</scope><scope>HCIFZ</scope><scope>L6V</scope><scope>M7S</scope><scope>PIMPY</scope><scope>PQEST</scope><scope>PQQKQ</scope><scope>PQUKI</scope><scope>PRINS</scope><scope>PTHSS</scope></search><sort><creationdate>20200409</creationdate><title>Detection and Analysis of Drive-by Downloads and Malicious Websites</title><author>Ibrahim, Saeed ; Nawwaf Al Herami ; Ebrahim Al Naqbi ; Aldwairi, Monther</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-proquest_journals_23590924103</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2020</creationdate><topic>Downloading</topic><topic>Machine learning</topic><topic>Malware</topic><topic>Websites</topic><toplevel>online_resources</toplevel><creatorcontrib>Ibrahim, Saeed</creatorcontrib><creatorcontrib>Nawwaf Al Herami</creatorcontrib><creatorcontrib>Ebrahim Al Naqbi</creatorcontrib><creatorcontrib>Aldwairi, Monther</creatorcontrib><collection>ProQuest SciTech Collection</collection><collection>ProQuest Technology Collection</collection><collection>Materials Science &amp; Engineering Collection</collection><collection>ProQuest Central (Alumni Edition)</collection><collection>ProQuest Central UK/Ireland</collection><collection>ProQuest Central Essentials</collection><collection>ProQuest Central</collection><collection>Technology Collection</collection><collection>ProQuest One Community College</collection><collection>ProQuest Central Korea</collection><collection>SciTech Premium Collection</collection><collection>ProQuest Engineering Collection</collection><collection>Engineering Database</collection><collection>Publicly Available Content Database</collection><collection>ProQuest One Academic Eastern Edition (DO NOT USE)</collection><collection>ProQuest One Academic</collection><collection>ProQuest One Academic UKI Edition</collection><collection>ProQuest Central China</collection><collection>Engineering Collection</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Ibrahim, Saeed</au><au>Nawwaf Al Herami</au><au>Ebrahim Al Naqbi</au><au>Aldwairi, Monther</au><format>book</format><genre>document</genre><ristype>GEN</ristype><atitle>Detection and Analysis of Drive-by Downloads and Malicious Websites</atitle><jtitle>arXiv.org</jtitle><date>2020-04-09</date><risdate>2020</risdate><eissn>2331-8422</eissn><abstract>A drive by download is a download that occurs without users action or knowledge. It usually triggers an exploit of vulnerability in a browser to downloads an unknown file. The malicious program in the downloaded file installs itself on the victims machine. Moreover, the downloaded file can be camouflaged as an installer that would further install malicious software. Drive by downloads is a very good example of the exponential increase in malicious activity over the Internet and how it affects the daily use of the web. In this paper, we try to address the problem caused by drive by downloads from different standpoints. We provide in depth understanding of the difficulties in dealing with drive by downloads and suggest appropriate solutions. We propose machine learning and feature selection solutions to remedy the the drive-by download problem. Experimental results reported 98.2% precision, 98.2% F-Measure and 97.2% ROC area.</abstract><cop>Ithaca</cop><pub>Cornell University Library, arXiv.org</pub><oa>free_for_read</oa></addata></record>
fulltext fulltext
identifier EISSN: 2331-8422
ispartof arXiv.org, 2020-04
issn 2331-8422
language eng
recordid cdi_proquest_journals_2359092410
source Freely Accessible Journals
subjects Downloading
Machine learning
Malware
Websites
title Detection and Analysis of Drive-by Downloads and Malicious Websites
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-02-08T13%3A34%3A28IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest&rft_val_fmt=info:ofi/fmt:kev:mtx:book&rft.genre=document&rft.atitle=Detection%20and%20Analysis%20of%20Drive-by%20Downloads%20and%20Malicious%20Websites&rft.jtitle=arXiv.org&rft.au=Ibrahim,%20Saeed&rft.date=2020-04-09&rft.eissn=2331-8422&rft_id=info:doi/&rft_dat=%3Cproquest%3E2359092410%3C/proquest%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2359092410&rft_id=info:pmid/&rfr_iscdi=true