SBIR Phase I: Stopping URL-Fraud One Website at a Time

这个小型企业创新研究(SBIR)第一阶段项目将开发一种新的方法，以保护个人和企业免受从事URL欺诈的虚假和恶意网站造成的损害。这些网站利用用户的粗心大意和缺乏经验，他们经常输入错误的网站名称或跟踪垃圾电子邮件的超链接，这些垃圾电子邮件似乎来自合法组织，如他们的银行。提议的核心技术包括一种自动检测网站是否合法的方法。这项工作的新颖性在于开发了个人资料，这些资料捕捉了网站属性和行为的多个方面。该项目需要网络、数据挖掘、图挖掘和机器学习的协同作用，以便识别每个配置文件中的正确特征，并将它们智能地组合在一起，以做出最终决定。拟议的工作具有很高的商业潜力，并对经常使用互联网的用户产生直接影响。网络欺诈是一个直接且代价高昂的问题，通过身份盗窃、电子邮件垃圾邮件和病毒传播影响人们和企业，所有这些都是互联网威胁的相互关联的表现形式。通过开发网络浏览器插件和监控工具，拟议中的技术将使上网和电子邮件对于不太懂技术的人来说更安全，比如老年人和儿童，他们特别容易受到伤害。

This Small Business Innovation Research (SBIR) Phase I project will develop a novel approach to protect people and businesses from damage inflicted by phony and malicious web-sites, which engage in URL-fraud. These web-sites exploit the carelessness and inexperience of users, who often mistype the name of a site or follow hyperlinks from email spam, which appears to be from a legitimate organization, such as their bank. The proposed core technology consists of a method to automatically detect whether a website is legitimate or not. The novelty of the work lies in the development of profiles, which capture multiple facets of the properties and the behavior of a website. The project requires a synergy between networking, datamining, graph-mining and machine learning in order to identify the right features in each profile and combine them intelligently for a final decision.The proposed work has high commercial potential and direct impact on regular Internet users. Web-fraud is an immediate and expensive problem that affects people and business through identity theft, email spam, and the spread of viruses, all of which are interconnected manifestations of Internet threats. Through the development of web-browser plug-ins and monitoring tools, the proposed technology will make web-surfing and email safer for the less tech-savvy people, such as elders and children, which are particularly vulnerable.