101. Data-Driven Characterization and Detection of COVID-19 Themed Malicious Websites
- Author
-
Mir Mehedi Ahsan Pritom, Min Xu, Raymond M. Bateman, Kristin M. Schweitzer, and Shouhuai Xu
- Subjects
FOS: Computer and information sciences ,050101 languages & linguistics ,Computer Science - Cryptography and Security ,Coronavirus disease 2019 (COVID-19) ,Computer science ,05 social sciences ,Volume (computing) ,02 engineering and technology ,Computer security ,computer.software_genre ,Data-driven ,Domain (software engineering) ,Information sensitivity ,Norm (artificial intelligence) ,0202 electrical engineering, electronic engineering, information engineering ,020201 artificial intelligence & image processing ,0501 psychology and cognitive sciences ,computer ,Cryptography and Security (cs.CR) - Abstract
COVID-19 has hit hard on the global community, and organizations are working diligently to cope with the new norm of "work from home". However, the volume of remote work is unprecedented and creates opportunities for cyber attackers to penetrate home computers. Attackers have been leveraging websites with COVID-19 related names, dubbed COVID-19 themed malicious websites. These websites mostly contain false information, fake forms, fraudulent payments, scams, or malicious payloads to steal sensitive information or infect victims' computers. In this paper, we present a data-driven study on characterizing and detecting COVID-19 themed malicious websites. Our characterization study shows that attackers are agile and are deceptively crafty in designing geolocation targeted websites, often leveraging popular domain registrars and top-level domains. Our detection study shows that the Random Forest classifier can detect COVID-19 themed malicious websites based on the lexical and WHOIS features defined in this paper, achieving a 98% accuracy and 2.7% false-positive rate., Comment: 6 pages, 5 figures, manuscript published in 2020 IEEE International Conference on Intelligence and Security Informatics (ISI 2020)
- Published
- 2021
- Full Text
- View/download PDF