DNS and semantic analysis for phishing detection

Abstract : Phishing is a kind of modern swindles that targets electronic communications users and aims to persuade them to perform actions for a another’s benefit. Phishing attacks rely mostly on social engineering and that most phishing vectors leverage directing links represented by domain names and URLs, we introduce new solutions to cope with phishing. These solutions rely on the lexical and semantic analysis of the composition of domain names and URLs. Both of these resource pointers are created and obfuscated by phishers to trap their victims. Hence, we demonstrate in this document that phishing domain names and URLs present similarities in their lexical and semantic composition that are different form legitimate domain names and URLs composition. We use this characteristic to build models representing the composition of phishing URLs and domain names using machine learning techniques and natural language processing models. The built models are used for several applications such as the identification of phishing domain names and phishing URLs, the rating of phishing URLs and the prediction of domain names used in phishing attacks. All the introduced techniques are assessed on ground truth data and show their efficiency by meeting speed, coverage and reliability requirements. This document shows that the use of lexical and semantic analysis can be applied to domain names and URLs and that this application is relevant to detect phishing attacks
Document type :
Theses
Complete list of metadatas

Cited literature [158 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/tel-01751692
Contributor : Thèses Ul <>
Submitted on : Thursday, March 29, 2018 - 1:24:38 PM
Last modification on : Tuesday, April 24, 2018 - 1:30:08 PM

File

DDOC_T_2015_0058_MARCHAL.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : tel-01751692, version 1

Collections

Citation

Samuel Marchal. DNS and semantic analysis for phishing detection. Other [cs.OH]. Université de Lorraine, 2015. English. ⟨NNT : 2015LORR0058⟩. ⟨tel-01751692⟩

Share

Metrics

Record views

297

Files downloads

738