To Get Lost is to Learn the Way: An Analysis of Multi-Step Social Engineering Attacks on the Web

DOI Web Site 参考文献21件
  • KOIDE Takashi
    NTT Secure Platform Laboratories Graduate School of Environment and Information Sciences, Yokohama National University
  • CHIBA Daiki
    NTT Secure Platform Laboratories
  • AKIYAMA Mitsuaki
    NTT Secure Platform Laboratories
  • YOSHIOKA Katsunari
    Graduate School of Environment and Information Sciences, Yokohama National University Institute of Advanced Sciences, Yokohama National University
  • MATSUMOTO Tsutomu
    Graduate School of Environment and Information Sciences, Yokohama National University Institute of Advanced Sciences, Yokohama National University

抄録

<p>Web-based social engineering (SE) attacks manipulate users to perform specific actions, such as downloading malware and exposing personal information. Aiming to effectively lure users, some SE attacks, which we call multi-step SE attacks, constitute a sequence of web pages starting from a landing page and require browser interactions at each web page. Also, different browser interactions executed on a web page often branch to multiple sequences to redirect users to different SE attacks. Although common systems analyze only landing pages or conduct browser interactions limited to a specific attack, little effort has been made to follow such sequences of web pages to collect multi-step SE attacks. We propose STRAYSHEEP, a system to automatically crawl a sequence of web pages and detect diverse multi-step SE attacks. We evaluate the effectiveness of STRAYSHEEP's three modules (landing-page-collection, web-crawling, and SE-detection) in terms of the rate of collected landing pages leading to SE attacks, efficiency of web crawling to reach more SE attacks, and accuracy in detecting the attacks. Our experimental results indicate that STRAYSHEEP can lead to 20% more SE attacks than Alexa top sites and search results of trend words, crawl five times more efficiently than a simple crawling module, and detect SE attacks with 95.5% accuracy. We demonstrate that STRAYSHEEP can collect various SE attacks, not limited to a specific attack. We also clarify attackers' techniques for tricking users and browser interactions, redirecting users to attacks.</p>

収録刊行物

参考文献 (21)*注記

もっと見る

キーワード

詳細情報 詳細情報について

問題の指摘

ページトップへ