Protecting and preventing sensitive data from being used inappropriately has become a challenging task. Even a small mistake in securing data can be exploited by phishing attacks to release private information such as passwords or financial information to a malicious actor. Phishing has now proven so successful; it is the number one attack vector. Many approaches have been proposed to protect against this type of cyber-attack, from additional staff training, enriched spam filters to large collaborative databases of known threats such as PhishTank and OpenPhish. However, they mostly rely upon a user falling victim to an attack and manually adding this new threat to the shared pool, which presents a constant disadvantage in the fightback against phishing. In this paper, we propose a novel approach to protect against phishing attacks using binary visualisation and machine learning. Unlike previous work in this field, our approach uses an automated detection process and requires no further user interaction, which allows a faster and more accurate detection process. The experiment results show that our approach has a high detection rate
翻译:保护和防止不适当地使用敏感数据已成为一项具有挑战性的任务。即使是在获取数据方面的一个小错误,也可以通过钓鱼攻击来利用获取数据方面的一个小错误,向恶意行为者发布私人信息,例如密码或金融信息。现在,钓鱼已证明非常成功;这是头号攻击矢量。许多办法都是为了防止这种网络攻击,从额外的工作人员培训、丰富的垃圾过滤器到已知威胁(如PhishTank和OpenPhish)的大型合作数据库。然而,它们大多依靠成为攻击受害者的用户,并人工将这种新的威胁添加到共用池中,这在打击钓鱼方面始终处于劣势。在本文件中,我们提议采用新的办法,利用二元视觉化和机器学习来防止钓鱼攻击。与以前在这一领域的工作不同,我们的办法使用自动探测程序,不需要进一步的用户互动,从而能够更快和更准确地探测过程。实验结果显示,我们的方法具有很高的探测率。