%0 Journal Article
%T Real-time Detection of Malicious Web Pages Based on Statistical Learning<br>基于统计学习的挂马网页实时检测
%A WANG Tao
%A YU Shun-zheng
%A <br>王涛
%A 余顺争
%J 计算机科学
%D 2011
%I 
%X Malicious Web pages impose increasing threats on Web security in recent years. Currently, there are mainly two client side protection approaches including anti-virus software packages and blacklists of malicious sites. Anti-virus techniques commonly use signaturcbased approaches which might not be able to efficiently identify malicious HTMI codes with encryption and obfuscation. Furthermore, blacklisting techniques are difficult to keep up-to-date. This paper presented a novel classification method for real-time detecting malicious Web pages which is independent with the contents of Web pages. Our approach characterizes malicious Web pages using HTTP session information. With representafive statistical features and decision tree algorithm in machine learning,we built an effective classification model for online real-time detecting malicious Web pages. Experiment results demonstrate that we arc able to successfully detect 89. 7% of the malicious Web pages with a low false positive rate of 0. 3%.
%K Malicious Web pages
%K HTTP session
%K Decision tree
%K Machine learning<br>挂马网页，HTTP会话，决策树，机器学习
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=DB610B4635E699CDC7F6BBDEE472A4E5&yid=9377ED8094509821&vid=16D8618C6164A3ED&iid=CA4FD0336C81A37A&sid=117F81797AB182FC&eid=869807E2D7BED9EC&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=10