paper-with-me

홈 › Papers

TypoSwype: An Imaging Approach to Detect Typo-Squatting

2022-09-02 · Joon Sern Lee, Yam Gui Peng David

Typo-squatting domains are a common cyber-attack technique. It involves utilising domain names, that exploit possible typographical errors of commonly visited domains, to carry out malicious activities such as phishing, malware installation, etc. Current approaches typically revolve around string comparison algorithms like the Demaru-Levenschtein Distance (DLD) algorithm. Such techniques do not take into account keyboard distance, which researchers find to have a strong correlation with typical typographical errors and are trying to take account of. In this paper, we present the TypoSwype framework which converts strings to images that take into account keyboard location innately. We also show how modern state of the art image recognition techniques involving Convolutional Neural Networks, trained via either Triplet Loss or NT-Xent Loss, can be applied to learn a mapping to a lower dimensional space where distances correspond to image, and equivalently, textual similarity. Finally, we also demonstrate our method's ability to improve typo-squatting detection over the widely used DLD algorithm, while maintaining the classification accuracy as to which domain the input domain was attempting to typo-squat.

📄 PDF Abstract BibTeX arXiv:2209.00783

Code (0)

등록된 구현이 없습니다.

Tasks

Triplet

Methods 이 논문이 사용한 방법론

Triplet Loss The goal of Triplet loss, in the context of Siamese Networks, is to maximize the joint probability among all score-pairs i.e. the product of all probabilities. By using its…
NT-Xent NT-Xent, or Normalized Temperature-scaled Cross Entropy Loss, is a loss function. Let $\text{sim}\left(\mathbf{u}, \mathbf{v}\right) =…

Similar Papers 제목 키워드 기반

Ensemble-based Feature Selection and Classification Model for DNS Typo-squatting Detection

2020-06-08 · Abdallah Moubayed, Emad Aqeeli, Abdallah Shami

Domain Name System (DNS) plays in important role in the current IP-based Internet architecture. This is because it performs the domain name to IP resolution. However, the DNS protocol has several security vulnerabilities…

feature selectionGeneral Classification

Training Large Language Models for Advanced Typosquatting Detection

2025-03-28 · Jackson Welch

Typosquatting is a long-standing cyber threat that exploits human error in typing URLs to deceive users, distribute malware, and conduct phishing attacks. With the proliferation of domain names and new Top-Level Domains …

DNS Typo-squatting Domain Detection: A Data Analytics & Machine Learning Based Approach

2020-12-25 · Abdallah Moubayed, MohammadNoor Injadat, Abdallah Shami, Hanan Lutfiyya

Domain Name System (DNS) is a crucial component of current IP-based networks as it is the standard mechanism for name to IP resolution. However, due to its lack of data integrity and origin authentication processes, it i…

BIG-bench Machine LearningClusteringEnsemble Learning

LLM App Squatting and Cloning

2024-11-12 · Yinglin Xie, Xinyi Hou, Yanjie Zhao, Kai Chen 외

Impersonation tactics, such as app squatting and app cloning, have posed longstanding challenges in mobile app stores, where malicious actors exploit the names and reputations of popular apps to deceive users. With the r…

Language ModelingLanguage ModellingLarge Language Model

Sound-skwatter (Did You Mean: Sound-squatter?) AI-powered Generator for Phishing Prevention

2023-10-10 · Rodolfo Valentim, Idilio Drago, Marco Mellia, Federico Cerutti

Sound-squatting is a phishing attack that tricks users into malicious resources by exploiting similarities in the pronunciation of words. Proactive defense against sound-squatting candidates is complex, and existing solu…