Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2019

Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack

Tran Phuong Thao
  • Fonction : Auteur
  • PersonId : 1153465
Yukiko Sawaya
  • Fonction : Auteur
  • PersonId : 1153466
Hoang-Quoc Nguyen-Son
  • Fonction : Auteur
  • PersonId : 1153467
Akira Yamada
  • Fonction : Auteur
  • PersonId : 1153468
Kazumasa Omote
  • Fonction : Auteur
  • PersonId : 1093963
Ayumu Kubota
  • Fonction : Auteur
  • PersonId : 1153469

Résumé

Visual homograph attack is a way that the attackers deceive victims about what domain they are communicating with by exploiting the fact that many characters look alike. The attack is growing into a serious problem and raising broad attention in reality when recently many brand domains have been attacked such as apple.com (Apple Inc.), adobe.com (Adobe Systems Incorporated), lloydsbank.co.uk (Lloyds Bank), etc. Therefore, how to detect visual homograph becomes a hot topic both in industry and research community. Several existing papers and tools have been proposed to find some homographs of a given domain based on different subsets of certain look-alike characters, or based on an analysis on the registered International Domain Name (IDN) database. However, we still lack a scalable and systematic approach that can detect sufficient homographs registered by attackers with a high accuracy and low false positive rate. In this paper, we construct a classification model to detect homographs and potential homographs registered by attackers using machine learning on feasible and novel features which are the visual similarity on each character and some selected information from Whois. The implementation results show that our approach can bring up to 95.90% of accuracy with merely 3.27% of false positive rate. Furthermore, we also make an empirical analysis on the collected homographs and found some interesting statistics along with concrete misbehaviors and purposes of the attackers.
Fichier principal
Vignette du fichier
485650_1_En_1_Chapter.pdf (405.62 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03744295 , version 1 (02-08-2022)

Licence

Identifiants

Citer

Tran Phuong Thao, Yukiko Sawaya, Hoang-Quoc Nguyen-Son, Akira Yamada, Kazumasa Omote, et al.. Hunting Brand Domain Forgery: A Scalable Classification for Homograph Attack. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.3-18, ⟨10.1007/978-3-030-22312-0_1⟩. ⟨hal-03744295⟩
68 Consultations
192 Téléchargements

Altmetric

Partager

More