Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang
{"title":"面向网络安全的恶意URL识别与分析研究","authors":"Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang","doi":"10.1109/IC-NIDC54101.2021.9660440","DOIUrl":null,"url":null,"abstract":"With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.","PeriodicalId":264468,"journal":{"name":"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)","volume":"51 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-11-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"Research on Malicious URL Identification and Analysis for Network Security\",\"authors\":\"Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang\",\"doi\":\"10.1109/IC-NIDC54101.2021.9660440\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.\",\"PeriodicalId\":264468,\"journal\":{\"name\":\"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)\",\"volume\":\"51 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-11-17\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IC-NIDC54101.2021.9660440\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IC-NIDC54101.2021.9660440","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Research on Malicious URL Identification and Analysis for Network Security
With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.