基于文本特征分析的钓鱼邮件检测

被引：5

作者：

彭富明 ^{[1
]}

张卫丰 ^{[2
]}

彭寅 ^{[2
]}

机构：

[1] 南京理工大学自动化学院

[2] 南京邮电大学计算机学院

来源：

南京邮电大学学报(自然科学版) | 2012年 / 32卷 / 05期

关键词：

钓鱼检测; 邮件; 文本特征; 网页链接;

D O I：

10.14132/j.cnki.1673-5439.2012.05.025

中图分类号：

TP393.098 [];

学科分类号：

080402 ;

摘要：

提出了一种基于邮件文本特征的钓鱼邮件检测方法。首先利用邮件解析器将邮件中非文本部分内容剔除,然后提取邮件剩余部分中存在的网站链接及其他内容,并在此基础上提取10种特征。针对这些特征,利用机器学习方法对其进行训练和预测,将邮件分类为普通邮件和钓鱼邮件。我们改进了以往一些针对网站链接分析的检测方法,并结合钓鱼邮件发展的新趋势,提出了6种新的特征。实验证明,本方法结合了新的钓鱼邮件特征,有效地提高了钓鱼邮件检测的召回率以及精准率,同时误判率有所降低。并且,本方法稍加改进以后就能用于钓鱼网站的检测。

引用

页码：140 / 145

页数：6

共 11 条

[1]

Detecting Known and New Salting Tricks in Unwanted Emails. A. Bergholz,G. Paa(?),F. Reichartz,S. Strobel,M. F. Moens,B. Witten. Proceedings Conference on Email an AntiSpam CEAS . 2008

[2]

A comparison of machine learning techniques for phishing detection. Nimeh S A,Nappa D,Wang X L,et al. Proceedings of the Anti-Phishing Working Groups 2nd Annual Ecrime Researchers Summit . 2007

[3]

Phishing phish:An eval-uation of anti-phishing toolbars. CRANOR L,EGELMAN S,HONG J,et al. http:∥www.cylab.cmu.edu/research/techreports/2006/tr_cylab06018.html .

[4]

A proposalof the Ada Boost-based detection of phishing sites. MIYAMOTO D,HAZEYAMA H,KADOBAYASHI Y. Proceed-ings of the Joint Workshop on Information Security . 2007

[5]

To-wards phishing e-mail detection based on their structural properties. CHANDRASEKARAN M,KARAYANAN K,UPDAHYAYA S. http:∥www.albany.edu/iasymposium/proceedings/2006/chandrasekaran.pdf .

[6]

Improved PhishingDetection Using Model-based Features. BERGHOLZ A,CHANG J H,PAAβG,et al. Proceedings of theConference on Email and Anti-Spam (CEAS) . 2008

[7]

Learning to Detect PhishingEmails. FETTE I,SADEH N,TOMASIC A. http:∥reports-archive.adm.cs.cmu.edu/anon/isri2006/abstracts/06-112.html .

[8]

An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks. Collin Jackson,Daniel R. Simon,Desney S. Tan,Adam Barth. Proceedings of Usable Security (USEC ’’07) . 2007

[9]

Spamato: An Extendable Spam FilterSystem. K Albrecht,N Burri,R Wattenhofer. 2nd Conference on Email and Anti-Spam . 2005

[10]

New filtering approaches for phishing email. A Bergholz,JD Beer,S Glahn,MF Moens,G Paa?,S Strobel. J Comput Secur . 2010

← 1 2 →