CatchPhish:用于检测网络钓鱼页面上的同形攻击的模型

Lucas Candeia Teixeira, Júlio César Gomes De Barros, Bruno José Torres Fernandes, Carlo Marcelo Revoredo da Silva
{"title":"CatchPhish:用于检测网络钓鱼页面上的同形攻击的模型","authors":"Lucas Candeia Teixeira, Júlio César Gomes De Barros, Bruno José Torres Fernandes, Carlo Marcelo Revoredo da Silva","doi":"10.1109/IJCNN55064.2022.9892525","DOIUrl":null,"url":null,"abstract":"The growth in the numbers of phishing attacks, along with the volume of successful frauds, demonstrates vul-nerabilities of the protection tools and exposes the advance in the refinement of the attacks. In more than 70% of cases, the improvements rely on the presence of homographic terms as a mechanism to embed reliability in malicious pages. In this scenario, the present study proposes an intelligent approach denominated CatchPhish, which, through the attack target brand identification, can infer the veracity of the page evaluated. CatchPhish uses a Siamese neural network capable of identifying the presence of typosquatting mentions in phishing pages. In the experiments, the proposed approach achieved 99.30% of assertiveness. In addition, the proposed approach stands out for its ability to produce terms for training, so, instead of providing the tool with a high amount of distorted terms, it provides the mark preceded by the correct spelling, which circumvents a strong obstacle in the construction of protection mechanisms.","PeriodicalId":106974,"journal":{"name":"2022 International Joint Conference on Neural Networks (IJCNN)","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2022-07-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"CatchPhish: Model for detecting homographic attacks on phishing pages\",\"authors\":\"Lucas Candeia Teixeira, Júlio César Gomes De Barros, Bruno José Torres Fernandes, Carlo Marcelo Revoredo da Silva\",\"doi\":\"10.1109/IJCNN55064.2022.9892525\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The growth in the numbers of phishing attacks, along with the volume of successful frauds, demonstrates vul-nerabilities of the protection tools and exposes the advance in the refinement of the attacks. In more than 70% of cases, the improvements rely on the presence of homographic terms as a mechanism to embed reliability in malicious pages. In this scenario, the present study proposes an intelligent approach denominated CatchPhish, which, through the attack target brand identification, can infer the veracity of the page evaluated. CatchPhish uses a Siamese neural network capable of identifying the presence of typosquatting mentions in phishing pages. In the experiments, the proposed approach achieved 99.30% of assertiveness. In addition, the proposed approach stands out for its ability to produce terms for training, so, instead of providing the tool with a high amount of distorted terms, it provides the mark preceded by the correct spelling, which circumvents a strong obstacle in the construction of protection mechanisms.\",\"PeriodicalId\":106974,\"journal\":{\"name\":\"2022 International Joint Conference on Neural Networks (IJCNN)\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-07-18\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2022 International Joint Conference on Neural Networks (IJCNN)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IJCNN55064.2022.9892525\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 International Joint Conference on Neural Networks (IJCNN)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IJCNN55064.2022.9892525","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

摘要

网络钓鱼攻击数量的增长,以及成功欺诈的数量,表明了保护工具的漏洞,并暴露了攻击改进的进步。在超过70%的情况下,改进依赖于同形词的存在,作为在恶意页面中嵌入可靠性的机制。在这种情况下,本研究提出了一种名为CatchPhish的智能方法,该方法通过攻击目标品牌识别,可以推断被评估页面的真实性。CatchPhish使用连体神经网络,能够识别钓鱼页面中出现的打字错误。在实验中,所提出的方法达到了99.30%的自信。此外,该方法的突出之处在于它能够生成用于训练的术语,因此,它不会为工具提供大量扭曲的术语,而是提供拼写正确的标记,这规避了构建保护机制中的一个强大障碍。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
CatchPhish: Model for detecting homographic attacks on phishing pages
The growth in the numbers of phishing attacks, along with the volume of successful frauds, demonstrates vul-nerabilities of the protection tools and exposes the advance in the refinement of the attacks. In more than 70% of cases, the improvements rely on the presence of homographic terms as a mechanism to embed reliability in malicious pages. In this scenario, the present study proposes an intelligent approach denominated CatchPhish, which, through the attack target brand identification, can infer the veracity of the page evaluated. CatchPhish uses a Siamese neural network capable of identifying the presence of typosquatting mentions in phishing pages. In the experiments, the proposed approach achieved 99.30% of assertiveness. In addition, the proposed approach stands out for its ability to produce terms for training, so, instead of providing the tool with a high amount of distorted terms, it provides the mark preceded by the correct spelling, which circumvents a strong obstacle in the construction of protection mechanisms.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信