高效的基于段模式的恶意URL检测方法

提出一种高效的基于段模式的检测恶意URL的方法，该方法首先解析已标注的恶意URL中的域名、路径名和文件名3个语义段，然后通过建立以三元组为词项的倒排索引快速计算恶意URL每个语义段的模式，最后基于倒排索引查找到的段模式来判定给定的URL是否是恶意URL。不仅如此，该方法还支持基于Jaccard的随机域名识别技术来判定包含随机域名的恶意URL。实验结果表明，与当前先进的基准方法相比，该方法具有较好的性能和可扩展性。

Efficient segment pattern based method formalicious URL detection

An efficient segment based method for detecting malicious URL was proposed. Firstly it analyzed the annotated malicious URLs in terms of three semantic segments, i.e., domain segment, path segment and file segment. Secondly it quickly calculated the common pattern of each semantic segment exploiting the tri-gram model based inverted index. Finally it decided whether a given URL was malicious based on the segment patterns returned by searching the inverted index. Moreover, this method also supported the Jaccard based random domain name identification technique for deciding malicious URLs with random domain name. Experimental results show that proposed method outperforms the state-of-the-art baseline methods, and can achieve good efficiency and scalability on malicious URL detection.