Abstract
Website defacement attacks have been one of major threats to websites and web portals of private and public organizations. The attacks can cause serious consequences to website owners, including interrupting the website operations and damaging the owner’s reputation, which may lead to big financial losses. A number of techniques have been proposed for website defacement monitoring and detection, such as checksum comparison, diff comparison, DOM tree analysis and complex algorithms. However, some of them only work on static web pages and the others require extensive computational resources. In this paper, we propose a machine learning-based method for website defacement detection. In our method, machine learning techniques are used to build classifiers (detection profile) for page classification into either Normal or Attacked class. As the detection profile can be learned from training data, our method can work well for both static and dynamic web pages. Experimental results show that our approach achieves high detection accuracy of over 93% and low false positive rate of less than 1%. In addition, our method does not require extensive computational resources, so it is practical for online deployment.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
What is web defacement attack and defensive measures. https://www.digistar.vn/tan-cong-giao-dien-deface-la-gi-va-cach-khac-phuc/. Accessed 20 June 2018
Romagna, M., van den Hout, N.J.: Hacktivism and website defacement: motivations, capabilities and potential threats. In: 27th Virus Bulletin International Conference, Madrid, Spain, vol. 1 (2017)
VNCS – Central website monitoring solution. http://vncs.vn/portfolio/giai-phap-giam-sat-websites-tap-trung. Accessed 20 June 2018
Nagios Web Application Monitoring Software. https://www.nagios.com/solutions/web-application-monitoring/. Accessed 20 June 2018
Kim, W., Lee, J., Park, E., Kim, S.: Advanced Mechanism for Reducing False Alarm Rate in Web Page Defacement Detection. National Security Research Institute, Korea (2006)
Medvet, E., Fillonand, C., Bartoli, A.: Detection of web defacements by means of genetic programming. In: IAS 2007, Manchester, UK (2007)
Davanzo, G., Medvet, E., Bartoli, A.: A comparative study of anomaly detection techniques in web site defacement detection. In: Proceedings of The IFIP TC 11 23rd International Information Security Conference, SEC-2008, pp. 711–716 (2008). https://doi.org/10.1007/978-0-387-09699-5_50
Bartoli, A., Davanzo, G., Medvet, E.: A framework for large-scale detection of Web site defacements. ACM Trans. Internet Technol. 10(3), Article 10 (2010)
Davanzo, G., Medvet, E., Bartoli, A.: Anomaly detection techniques for a web defacement monitoring service. J. Expert. Syst. Appl. 38(2011), 12521–12530 (2011). https://doi.org/10.1016/j.eswa.2011.04.038
Borgolte, K., Kruegel, C., Vigna, G.: Meerkat: detecting website defacements through image-based object recognition. In: Proceedings of the 24th USENIX Security Symposium (USENIX Security) (2015)
Zone-H. http://zone-h.org. Accessed 20 June 2018
Weka. https://www.cs.waikato.ac.nz/ml/weka/. Accessed 20 June 2018
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Switzerland AG
About this paper
Cite this paper
Hoang, X.D. (2019). A Website Defacement Detection Method Based on Machine Learning. In: Fujita, H., Nguyen, D., Vu, N., Banh, T., Puta, H. (eds) Advances in Engineering Research and Application. ICERA 2018. Lecture Notes in Networks and Systems, vol 63. Springer, Cham. https://doi.org/10.1007/978-3-030-04792-4_17
Download citation
DOI: https://doi.org/10.1007/978-3-030-04792-4_17
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-04791-7
Online ISBN: 978-3-030-04792-4
eBook Packages: EngineeringEngineering (R0)