Title
Measurement Study on Malicious Web Servers in the .nz Domain
Abstract
Client-side attacks have become an increasing problem on the Internet today. Malicious web pages launch so-called drive-by-download attacks that are capable to gain complete control of a user's machine by merely having that user visit a malicious web page. Criminals that are behind the majority of these malicious web pages are highly sensitive to location, language and economic trends to increase their return on investment. In this paper, a comprehensive measurement study of malicious web servers on the .nz domain is presented. The risk of drive-by-download attacks has been compared with other domains showing no elevated risk for the .nz domain. However, a comprehensive assessment of the .nz domain showed the existence of malicious web pages across a variety of types of web pages. Blacklisting services showed limited success to protect against such malicious web pages. This is primarily attributed to the highly dynamic nature of malicious web pages. Over a period of eight months, the .nz domain was monitored and continuous shifting of malicious behavior of web pages has been observed. The rates observed show that on average 50% of malicious URLs identified change monthly. The rates pose a challenge to blacklisting services as well as a risk to end users with rapid dissemination of zero-day attacks. Frequent scans of the web are required to obtain a good up-to-date view of the threat landscape.
Year
DOI
Venue
2009
10.1007/978-3-642-02620-1_2
ACISP
Keywords
Field
DocType
comprehensive measurement study,malicious web page,malicious behavior,web page,comprehensive assessment,malicious urls,elevated risk,nz domain,malicious web servers,measurement study,blacklisting service,malicious web server,return on investment,web pages
World Wide Web,End user,Return on investment,Web page,Computer science,Computer security,Blacklisting,Proxy cache,The Internet,Web server
Conference
Volume
ISSN
Citations 
5594
0302-9743
4
PageRank 
References 
Authors
0.56
9
5
Name
Order
Citations
PageRank
Christian Seifert1162.59
Vipul Delwadia281.78
Peter Komisarczuk314517.62
David Stirling440.56
Ian Welch56312.04