Informatics Publishing Limited

M. Olalere ¹, M. T. Abdullah ², R. Mahmod ², A. Abdullah ²

Affiliations
1 Cyber Security Science Department Federal University of Technology Minna, 920102, Niger, NG
2 Information Security Research Group Faculty of Computer Science and information Technology, Universiti Putra Malaysia, 43400, Selangor, MY

Abstract

Objective: To identify discriminative lexical features of malware URL through manual examination, and to study prevalence of these features thereby leading to proposition of discriminative lexical feature for real-time detection of malware URL. Methods/Statistical Analysis: Manual examination of malware URL using existing blacklist of malware URLs and empirical analysis allowed the authors to identify discriminative lexical features and to determine whether there is consistency in the way the attackers craft malware URLs respectively. Empirical analysis was carried on both the existing blacklisted malware URLs and newly collected malware URLs. Empirical analysis revealed that there is consistency in the way malware URLs is crafted by the attackers. To evaluate performance of our proposed lexical features, two previously used machine learning models were applied on our trained dataset of malware URLS and benign URLs. The essence of using these models is to enable us compare performance of our proposed lexical features with previous studies proposed feature groups. Our comparison shows that our proposed lexical features outperform previously proposed feature groups. Findings: Our first step was to manually examine blacklisted malware URLs. This step led to the identification of 12 discriminative lexical features which was later reduced to 11. The second step was an empirical analysis of the identified features of existing blacklisted malware URLs and newly collected malware URLs. Empirical analysis was carried out to determine whether there was consistency in the way malware URLs are crafted by the attackers. The results of our empirical analysis revealed that there is indeed consistency in the way malware URLs are crafted by the attackers. This implies that our carefully identified lexical features are common features of malware URL. After experimentation, the evaluation results reveal that our proposed lexical features outperform previously proposed feature groups. Applications/Improvements: Discriminative features are required to build real-time malware URLs detection system with machine learning algorithm. The proposed lexical features are set of discriminative feature that rely on textual properties of malware URL.

Keywords

Attackers, Blacklist, Lexical Features, Malware URL, Rea-time Malware URL Detection.

Full Text

   

R. Mahmod ¹, M. Z. Yahya ¹, N. Abdullah ²

Affiliations
1 Faculty of Chemical and Natural Resources Engineering, Universiti Malaysia Pahang Lebuhraya Tun Razak – 26300, Gambang, Pahang, MY
2 Rare Earth Research Centre (RERC), Universiti Malaysia Pahang, Lebuhraya Tun Razak – 26300, Gambang, Pahang, MY

Abstract

Crosslinked polymer beads were prepared by photoinitiated dispersion polymerization in a mixture of ethanol and water. In this study, the effect of types of photoinitiator, types of monomer and reaction times on particles morphology, size and size distribution and yield were investigated. Better quality of poly(st-co-EGDMA-co-VBC) obtained compared to poly(methylmethacrylate-co- EGDMA-co-VBC). However, the yield of poly(st-co-EGDMA-co-VBC) lower than poly(methylmethacrylate-co-EGDMA-co-VBC). On this regard, poly(methylmethacrylate-co-EGDMA-co-VBC) was selected to investigate further. Changing the types of photoinitiator managed to increase the quality and size of poly(methylmethacrylate-co-EGDMA-co-VBC) particles but yield obtained was decreasing. Meanwhile, longer reaction time leading to high yield and bigger size of poly(methylmethacrylate-co-EGDMA-co- VBC) particles but with lower quality. For all cases, FTIR analysis proved all functional groups have successfully attached to the polymeric backbone.

Keywords

Crosslinked Polymer, Morphology, Photo Initiated Dispersion Polymerization, Size Distribution, Yield.

Full Text