Malicious URL detecting method based on big data

• Main Author: HUANG YONGJUN
• Format: Patent
• Language: Chinese; English
• Published: 30.10.2018
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention provides a malicious URL detecting method based on big data. The method comprises the steps of extracting a profile feature, a semantic feature, a user behavior feature and a network feature of a URL; generating a classification model and an abnormity detecting model according to the profile feature, the semantic feature and partial user behavior feature of the URL; extracting the profile feature, the semantic feature and the partial user behavior feature of the URL from an Internet access log, performing detection on the features for generating a suspicious URL; extracting partial user behavior feature and the URL network feature, performing detection on the partial user behavior feature and the URL network feature, and generating the suspicious URL; performing combination,threshold determining and duplicate removing on the suspicious URLs generated in the two steps, and finally obtaining a final malicious URL. The method according to the invention has higher reliability than a single algorithm