An Internet Hosted Website Detection Method Based on Network Behavior Analysis for Power Grid Enterprises

Internet hosted websites are big threats to power grid enterprises because they may contain sensitive user data and business secrete while its information security is unregulated. Traditional technique to find Internet hosted websites is to set up web crawler and match key words in webpages, which is expensive and inefficient. In this paper, an Internet hosted website detection method based on network behavior analysis is introduced. Instead of parsing whole webpages, this method only analyzes network packet head information to get visit behavior features such as degree dispersion of source IP addresses and source departments visiting an Internet website. All behavior features of a destination website are integrated to get its probability of being an Internet hosted website. According to testing results on real data, Internet hosted websites are found in over 93 percent of the conducted tests.