Cyber-Fraud is One Typo Away
Cyber-Fraud is One Typo Away
复制标题
网络欺诈只差一处错别字
DOI：
--
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
L. Bhuyan
中科院分区：
文献类型：
--
作者：
A. Banerjee;D. Barman;M. Faloutsos;L. Bhuyan
在输入网址时出现的拼写错误可能会被网站 squatters（域名抢注者、恶意占位者）利用：用户会被引导至虚假网站，这种现象我们称之为寄生网址命名。这些虚假网站模仿热门网站，试图从不明就里的用户那里获取个人信息，或者只是向用户做广告和销售产品。在本文中，我们进行了一项大规模研究，以量化这种寄生网址命名的程度。我们从900个热门网站的语料库（我们将其称为原始网址）入手，通过系统且详尽地改变原始名称生成了大约300万个网址。在60天的时间里，我们分析有多少网站的网址与我们的原始网址非常相似。我们发现寄生网址命名是一个普遍存在的问题，并对这个问题的严重程度进行了量化。我们相信这项工作将为打击网络欺诈的研究和工具开发迈出第一步。
Spelling errors when typing a URL can be exploited by website-squatters: users are led to phony sites in a phenomenon we call parasitic URL naming. These phony sites imitate popular websites and try to extract personal information from unsuspecting users, or simply advertise and sell products to users. In this paper, we conduct a massive study in order to quantify the extent of this parasitic URL naming We start with a corpus of 900 popular websites, which we refer to as original URLs, and generate roughly 3 million URLs by varying the original names systematically and exhaustively. Over a period of 60 days, we analyze how many sites have URLs very similar to our original URLs. We find that parasitic URL naming is a wide-spread problem and quantify the extent of this issue. We believe that this work will provide the first step towards research and tools to combat web-fraud.