面向网络安全的恶意URL识别与分析研究

Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang
{"title":"面向网络安全的恶意URL识别与分析研究","authors":"Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang","doi":"10.1109/IC-NIDC54101.2021.9660440","DOIUrl":null,"url":null,"abstract":"With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.","PeriodicalId":264468,"journal":{"name":"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)","volume":"51 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-11-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"Research on Malicious URL Identification and Analysis for Network Security\",\"authors\":\"Zhuofan Huang, Yangsen Zhang, Ruixue Duan, Renjie Wang\",\"doi\":\"10.1109/IC-NIDC54101.2021.9660440\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.\",\"PeriodicalId\":264468,\"journal\":{\"name\":\"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)\",\"volume\":\"51 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-11-17\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IC-NIDC54101.2021.9660440\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2021 7th IEEE International Conference on Network Intelligence and Digital Content (IC-NIDC)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IC-NIDC54101.2021.9660440","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 2

摘要

随着互联网的快速发展,各种恶意url的出现严重危害着国家网络信息安全和用户信息安全。因此,准确识别和处理恶意url对网络安全具有重要的理论意义和实用价值。本文提出了一种基于CNN + BiLSTM + CNN模型的恶意url字符级特征提取与识别的研究方法。基于海量URL数据集,分析了恶意URL的参数分布特征,并引入跳跃克模型对预处理后的数据集进行无监督训练,从而嵌入URL的特征。然后引入CNN + BiLSTM + CNN模型,提取和优化恶意url的局部特征和时间特征。实验结果表明,在相同的数据集上,基于CNN + BiLSTM + CNN模型的恶意URL识别方法比传统的基于BiLSTM的算法和基于CNN的算法具有更好的识别效果和更高的准确率。F1值提高到98.14%,平均迭代时间大大缩短。结果表明,本文提出的研究方法在网络安全的恶意URL识别领域具有良好的适用性。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
Research on Malicious URL Identification and Analysis for Network Security
With the rapid development of the Internet, the emergence of various malicious URLs seriously endangers the national network information security and user information security. Therefore, it is of great theoretical significance and practical value for network security to accurately identify and deal with malicious URLs. This paper proposes a research method of character level feature extraction and recognition of malicious URLs based on CNN + BiLSTM + CNN model. Based on the massive URL data sets, the parameter distribution characteristics of malicious URLs are analyzed, and the skip gram model is introduced to unsupervised train the preprocessed data sets, so as to embed the characters of URLs. Then the CNN + BiLSTM + CNN model is introduced to extract and optimize the local and temporal features of malicious URLs. The experimental results show that on the same data set, the malicious URL recognition method based on CNN + BiLSTM + CNN model has better recognition effect and higher accuracy than the traditional BiLSTM based algorithm and CNN based algorithm. The F1 value is increased to 98.14%, and the average iteration time is greatly reduced. It shows that the research method proposed in this paper has good applicability in the field of malicious URL identification for network security.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
期刊最新文献
Improving Dense FAQ Retrieval with Synthetic Training A Security Integrated Attestation Scheme for Embedded Devices Zero-Shot Voice Cloning Using Variational Embedding with Attention Mechanism Convolutional Neural Network Based Transmit Power Control for D2D Communication in Unlicensed Spectrum WCD: A New Chinese Online Social Media Dataset for Clickbait Analysis and Detection
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1