1. Combating phishing and script-based attacks: a novel machine learning framework for improved client-side security.
- Author
-
Hong, Jiwon, Kim, Hyeongmin, Oh, Suhyeon, Im, Yerin, Jeong, Hyeonseong, Kim, Hyunmin, Jang, Eunkueng, and Kim, Kyounggon
- Abstract
Given the rising challenge of client-based web attacks through vulnerabilities in websites, traditional pattern detection methods often fall short in identifying emerging threats. To bridge this gap, our study proposes a methodology employing machine learning algorithms to counteract three specific types of client-based web attacks: Malicious JavaScript, phishing attacks, and script-based web attacks. Our method extracts significant features from the source code and URLs, subsequently applying a range of machine learning models, including random forest (RF), deep neural network (DNN), and convolutional neural network (CNN), to pinpoint the most effective model. Experimental evidence from our research highlights the RF model’s exceptional accuracy, achieving 99.99% in detecting Malicious JavaScript, 95.11% for phishing attacks, and 94.77% for script-based web attacks. Additionally, our work extends beyond theoretical contributions, evidenced by the development of a Chrome extension based on the high-performing RF model, offering a tangible solution for enhancing web browsing security. [ABSTRACT FROM AUTHOR]
- Published
- 2025
- Full Text
- View/download PDF