Shady paths: leveraging surfing crowds to detect malicious web pages

No abstract is available for this paper.

• Publication year

  2013

• Venue

  Conference on Computer and Communications Security

• Publication date

  2013-11-04

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/2508859.2516682
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Revolver: An Automated Approach to the Detection of Evasive Web-based Malware

  2013cited by this paper
• Knowing your enemy: understanding and detecting malicious web advertising

  2012cited by this paper
• WarningBird: Detecting Suspicious URLs in Twitter Stream

  2012influential reference
• Rozzle: De-cloaking Internet Malware

  2012influential reference
• Manufacturing compromise: the emergence of exploit-as-a-service

  2012cited by this paper
• Fear the EAR: discovering and mitigating execution after redirect vulnerabilities

  2011cited by this paper
• Understanding fraudulent activities in online ad exchanges

  2011cited by this paper
• Cloak and dagger: dynamics of web search cloaking

  2011influential reference
• SURF: detecting and measuring search poisoning

  2011influential reference
• The Underground Economy of Fake Antivirus Software

  2011influential reference
• ARROW: GenerAting SignatuRes to Detect DRive-By DOWnloads

  2011cited by this paper
• On the Effects of Registrar-level Intervention

  2011cited by this paper
• WebCop: Locating Neighborhoods of Malware on the Web

  2010cited by this paper
• Detection and analysis of drive-by-download attacks and malicious JavaScript code

  2010cited by this paper
• Zozzle: Low-overhead Mostly Static JavaScript Malware Detection

  2010cited by this paper
• Beyond blacklists: learning to detect malicious web sites from suspicious URLs

  2009influential reference
• NOZZLE: A Defense Against Heap-spraying Code Injection Attacks

  2009cited by this paper
• PhoneyC: A Virtual Client Honeypot

  2009cited by this paper
• The WEKA data mining software: an update

  2009cited by this paper
• Tracking Web spam with HTML style similarities

  2008influential reference
• All Your iFRAMEs Point to Us

  2008cited by this paper
• Spamming botnets: signatures and characteristics

  2008influential reference
• Et al

  2008cited by this paper
• HoneyC - The low-interaction client honeypot

  2006cited by this paper
• Detecting spam web pages through content analysis

  2006influential reference
• Automated Web Patrol with Strider HoneyMonkeys: Finding Web Sites That Exploit Browser Vulnerabilities

  2006cited by this paper
• Detecting Stealth Web Pages That Use Click-Through Cloaking

  2006cited by this paper
• Detecting semantic cloaking on the web

  2006influential reference
• Sequential Minimal Optimization : A Fast Algorithm for Training Support Vector Machines

  1998influential reference
• 2011 IEEE Symposium on Security and Privacy Design and Evaluation of a Real-Time URL Spam Filtering Service

  year unknowninfluential reference

• Detecting Unintended Redirects to Malicious Websites on Android Devices Based on URL-Switching Interval

  2024cites this paper
• TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version)

  2024cites this paper
• Evaluation of Malware Classification Models for Heterogeneous Data

  2024cites this paper
• "Get in Researchers; We're Measuring Reproducibility": A Reproducibility Study of Machine Learning Papers in Tier 1 Security Conferences

  2023cites this paper
• Graph Mining for Cybersecurity: A Survey

  2023cites this paper
• Foreseer: Efficiently Forecasting Malware Event Series with Long Short-Term Memory

  2022cites this paper
• Encrypted Malware Traffic Detection via Graph-based Network Analysis

  2022cites this paper
• Toward a Better Understanding of Mobile Users’ Behavior: A Web Session Repair Scheme

  2022cites this paper
• The Inventory is Dark and Full of Misinformation: Understanding Ad Inventory Pooling in the Ad-Tech Supply Chain

  2022cites this paper
• On the Limitations of Continual Learning for Malware Classification

  2022cites this paper
• The Inventory is Dark and Full of Misinformation: Understanding the Abuse of Ad Inventory Pooling in the Ad-Tech Supply Chain

  2022cites this paper
• Automated Collection of Redirect Chains from Search Results Pages to Prize Scam Pages

  2022cites this paper
• Detecting Malware Activity Using Public Search Data

  2022cites this paper
• Discovering and Measuring Malicious URL Redirection Campaigns from Fake News Domains

  2021cites this paper
• LSTM RNN: detecting exploit kits using redirection chain sequences

  2021cites this paper
• Compromised or Attacker-Owned: A Large Scale Classification and Study of Hosting Domains of Malicious URLs

  2021cites this paper
• An Exploit Kits Detection Approach Based on HTTP Message Graph

  2021cites this paper
• Challenges and pitfalls in malware research

  2021cites this paper
• Where are you taking me?Understanding Abusive Traffic Distribution Systems

  2021cites this paper
• To Get Lost is to Learn the Way: An Analysis of Multi-Step Social Engineering Attacks on the Web

  2021cites this paper
• MadDroid: Characterizing and Detecting Devious Ad Contents for Android Apps

  2020cites this paper
• Understanding and Mitigating the Security Risks of Content Inclusion in Web Browsers

  2020cites this paper
• SiegeCannon: Detecting Malicious Infrastructures by Analyzing Integral Characteristics of Involved Server Flocks

  2020cites this paper
• Tracing and Analyzing Web Access Paths Based on User-Side Data Collection: How Do Users Reach Malicious URLs?

  2020cites this paper
• Dissecting Mobile Offerwall Advertisements: An Explorative Study

  2020cites this paper
• deMSF: a Method for Detecting Malicious Server Flocks for Same Campaign

  2020cites this paper
• Leveraging Scalable Data Analysis to Proactively Bolster the Anti-Phishing Ecosystem

  2020cites this paper
• Robust Malicious Communication Detection for Multi-layered Defense by Overcoming Anti-analysis Techniques

  2020influential citation
• Robustifying Machine Learning based Security Applications

  2020cites this paper
• To Get Lost is to Learn the Way: Automatically Collecting Multi-step Social Engineering Attacks on the Web

  2020cites this paper
• SIGL: Securing Software Installations Through Deep Graph Learning

  2020cites this paper
• Detecting Bots using Stream-based System with Data Synthesis

  2020cites this paper
• REdiREKT: Extracting Malicious Redirections from Exploit Kit Traffic

  2020cites this paper
• Throwing Darts in the Dark? Detecting Bots with Limited Data using Neural Data Augmentation

  2020cites this paper
• Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web

  2020cites this paper
• Deceptive Previews: A Study of the Link Preview Trustworthiness in Social Platforms

  2020cites this paper
• A Taxonomy for Social Engineering Attacks via Personal Devices

  2019cites this paper
• PhishFarm: A Scalable Framework for Measuring the Effectiveness of Evasion Techniques against Browser Phishing Blacklists

  2019cites this paper
• Resident Evil: Understanding Residential IP Proxy as a Dark Service

  2019cites this paper
• Poster: On the Application of NLP to Discover Relationships between Malicious Network Entities

  2019cites this paper
• Automated Link Tracing for Classification of Malicious Websites in Malware Distribution Networks

  2019cites this paper
• SoK: A Comprehensive Reexamination of Phishing Research From the Security Perspective

  2019cites this paper
• Evasive Malicious Website Detection by Leveraging Redirection Subgraph Similarities

  2019cites this paper
• What You See is NOT What You Get: Discovering and Tracking Social Engineering Attack Campaigns

  2019cites this paper
• On Designing Machine Learning Models for Malicious Network Traffic Classification

  2019cites this paper
• Protection Against Semantic Social Engineering Attacks

  2018cites this paper
• WebMon: ML- and YARA-based malicious webpage detection

  2018cites this paper
• TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time

  2018cites this paper
• SAD THUG: Structural Anomaly Detection for Transmissions of High-value Information Using Graphics

  2018cites this paper
• Predicting Impending Exposure to Malicious Content from User Behavior

  2018cites this paper
• Error-Sensor: Mining Information from HTTP Error Traffic for Malware Intelligence

  2018cites this paper
• Host Fingerprinter Liveness Checker Relay Profiler Controlled web servers Controlled clients RESIP service Controlled DNS serversRESIP service RESIP service Purchase RESIP services Classifier DNS Whois Feature Extraction Training Dataset RESIP Candidates RESIP The Infiltration Framework Residential

  2018cites this paper
• Malicious URL protection based on attackers' habitual behavioral analysis

  2018cites this paper
• Identifying Evasive Code in Malicious Websites by Analyzing Redirection Differences

  2018cites this paper
• Cloud repository as a malicious service: challenge, identification and implication

  2018cites this paper
• MADE: Security Analytics for Enterprise Threat Detection

  2018cites this paper
• FriSM: Malicious Exploit Kit Detection via Feature-Based String-Similarity Matching

  2018cites this paper
• Bridging machine learning and computer network research: a survey

  2018cites this paper
• Understanding and detecting newly emerging attack vectors in cybercrimes

  2018cites this paper
• Verification of Web Content Integrity : Detection and Recovery Security Approach using Colored Petri Nets

  2018cites this paper
• Malicious Hidden Redirect Attack Web Page Detection Based on CSS Features

  2018cites this paper
• Online Advertising Fraud Detection Via Network Traffic Monitoring

  2018cites this paper
• Don't Let One Rotten Apple Spoil the Whole Barrel: Towards Automated Detection of Shadowed Domains

  2017cites this paper
• Malicious URL sequence detection using event de-noising convolutional neural network

  2017cites this paper
• A Malicious Web Site Identification Technique Using Web Structure Clustering

  2017cites this paper
• Ziffersystem: A novel malware distribution detection system

  2017cites this paper
• Machine Learning and Security of Non-Executable Files

  2017cites this paper
• DynaMiner: Leveraging Offline Infection Analytics for On-the-Wire Malware Detection

  2017influential citation
• Localisation of Attacks, Combating Browser-Based Geo-Information and IP Tracking Attacks

  2017cites this paper
• Fine-Grained Analysis of Compromised Websites with Redirection Graphs and JavaScript Traces

  2017cites this paper
• Marmite: Spreading Malicious File Reputation Through Download Graphs

  2017cites this paper
• Malicious URL Detection using Machine Learning: A Survey

  2017cites this paper
• Utilising the concept of human-as-a-security-sensor for detecting semantic social engineering attacks

  2017cites this paper
• Understanding Evasion Techniques that Abuse Differences Among JavaScript Implementations

  2017cites this paper
• Detecting Malicious Websites by Integrating Malicious, Benign, and Compromised Redirection Subgraph Similarities

  2017cites this paper
• PAD: Programming third-party web advertisement censorship

  2017cites this paper
• LoGos: Internet‐Explorer‐Based Malicious Webpage Detection

  2017cites this paper
• Real-world IP and network tracking measurement study of malicious websites with HAZOP

  2017cites this paper
• Analyzing the ecosystem of malicious URL redirection through longitudinal observation from honeypots

  2017cites this paper
• A Domain-Agnostic Approach to Spam-URL Detection via Redirects

  2017cites this paper
• Spotless Sandboxes: Evading Malware Analysis Systems Using Wear-and-Tear Artifacts

  2017cites this paper
• Measurement of IP and network tracking behaviour of malicious websites

  2016cites this paper
• Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions

  2016cites this paper
• Semantics-Preserving Dissection of JavaScript Exploits via Dynamic JS-Binary Analysis

  2016cites this paper
• Using Context to Improve Network-based Exploit Kit Detection

  2016cites this paper
• Cloak of Visibility: Detecting When Machines Browse a Different Web

  2016cites this paper
• When a Tree Falls: Using Diversity in Ensemble Classifiers to Identify Evasion in Malware Detectors

  2016cites this paper
• Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance

  2016cites this paper
• Seeking Nonsense, Looking for Trouble: Efficient Promotional-Infection Detection through Semantic Inconsistency Search

  2016cites this paper
• Detecting Malicious Exploit Kits using Tree-based Similarity Searches

  2016cites this paper
• Exploit Kit Website Detection Using HTTP Proxy Logs

  2016cites this paper
• Improving detection and annotation of malware downloads and infections through deep packet inspection

  2016cites this paper
• Website Forensic Investigation to Identify Evidence and Impact of Compromise

  2016cites this paper
• Hunting for invisibility: Characterizing and detecting malicious web infrastructures through server visibility analysis

  2016cites this paper
• Cache, Trigger, Impersonate: Enabling Context-Sensitive Honeyclient Analysis On-the-Wire

  2016cites this paper
• Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service

  2016cites this paper
• Automatic Extraction of Indicators of Compromise for Web Applications

  2016cites this paper
• Towards detection and prevention of malicious activities against web applications and internet services

  2016cites this paper
• Towards Measuring and Mitigating Social Engineering Software Download Attacks

  2016cites this paper
• Better Malware Ground Truth: Techniques for Weighting Anti-Virus Vendor Labels

  2015cites this paper