Ensemble-based Feature Selection and Classification Model for DNS Typo-squatting Detection

2020-06-08 · Abdallah Moubayed, Emad Aqeeli, Abdallah Shami

Domain Name System (DNS) plays in important role in the current IP-based Internet architecture. This is because it performs the domain name to IP resolution. However, the DNS protocol has several security vulnerabilities due to the lack of data integrity and origin authentication within it. This paper focuses on one particular security vulnerability, namely typo-squatting. Typo-squatting refers to the registration of a domain name that is extremely similar to that of an existing popular brand with the goal of redirecting users to malicious/suspicious websites. The danger of typo-squatting is that it can lead to information threat, corporate secret leakage, and can facilitate fraud. This paper builds on our previous work in [1], which only proposed majority-voting based classifier, by proposing an ensemble-based feature selection and bagging classification model to detect DNS typo-squatting attack. Experimental results show that the proposed framework achieves high accuracy and precision in identifying the malicious/suspicious typo-squatting domains (a loss of at most 1.5% in accuracy and 5% in precision when compared to the model that used the complete feature set) while having a lower computational complexity due to the smaller feature set (a reduction of more than 50% in feature set size).

📄 PDF Abstract BibTeX arXiv:2006.09272

Code (0)

등록된 구현이 없습니다.

Tasks

feature selectionGeneral Classification

Methods 이 논문이 사용한 방법론

Feature Selection Feature selection, also known as variable selection, attribute selection or variable subset selection, is the process of selecting a subset of relevant features (variables,…

DNS Typo-squatting Domain Detection: A Data Analytics & Machine Learning Based Approach

2020-12-25 · Abdallah Moubayed, MohammadNoor Injadat, Abdallah Shami, Hanan Lutfiyya

Domain Name System (DNS) is a crucial component of current IP-based networks as it is the standard mechanism for name to IP resolution. However, due to its lack of data integrity and origin authentication processes, it i…

BIG-bench Machine Learning Clustering Ensemble Learning

TypoSwype: An Imaging Approach to Detect Typo-Squatting

2022-09-02 · Joon Sern Lee, Yam Gui Peng David

Typo-squatting domains are a common cyber-attack technique. It involves utilising domain names, that exploit possible typographical errors of commonly visited domains, to carry out malicious activities such as phishing, …

Triplet

Training Large Language Models for Advanced Typosquatting Detection

2025-03-28 · Jackson Welch

Typosquatting is a long-standing cyber threat that exploits human error in typing URLs to deceive users, distribute malware, and conduct phishing attacks. With the proliferation of domain names and new Top-Level Domains …

Enhanced Classification Accuracy for Cardiotocogram Data with Ensemble Feature Selection and Classifier Ensemble

2020-10-27 · Tipawan Silwattananusarn, Wanida Kanarkard, Kulthida Tuamsuk

In this paper ensemble learning based feature selection and classifier ensemble model is proposed to improve classification accuracy. The hypothesis is that good feature sets contain features that are highly correlated w…

Classification Ensemble Learning feature selection General Classification

LLM App Squatting and Cloning

2024-11-12 · Yinglin Xie, Xinyi Hou, Yanjie Zhao, Kai Chen 외

Impersonation tactics, such as app squatting and app cloning, have posed longstanding challenges in mobile app stores, where malicious actors exploit the names and reputations of popular apps to deceive users. With the r…

Language Modeling Language Modelling Large Language Model