An Efficient Technique for Detection of Suspicious Malicious Web Site

Abstract

Abstract—In today’s web world web sites became attackers’ main target. Since days before virus signatures had been used to detect malicious web pages. In this paper the malicious web pages will be detected using a prototype system based on the concept of abnormal visibility, also it detects the exact location of malicious code in the source code. The proposed prototype system uses a Web Spider which captures the entire link URLs associated with the web page. HTML parser will parse the web pages and convert the code into data structures recognized by the Detector. The Detector will match the structure with the abnormal visibility fingerprints and locates possible malicious code. The system proves higher performance, higher efficiency and lower maintenance cost, almost all malicious web pages are detected and the malicious codes encoded in the JavaScript. The system provides security alarm for end-users before visiting malicious web pages.