Title
On the effectiveness of risk prediction based on users browsing behavior
Abstract
Users are typically the final target of web attacks: criminals are interested in stealing their money, their personal information, or in infecting their machines with malicious code. However, while many aspects of web attacks have been carefully studied by researchers and security companies, the reasons that make certain users more \"at risk\" than others are still unknown. Why do certain users never encounter malicious pages while others seem to end up on them on a daily basis? To answer this question, in this paper we present a comprehensive study on the effectiveness of risk prediction based only on the web browsing behavior of users. Our analysis is based on a telemetry dataset collected by a major AntiVirus vendor, comprising millions of URLs visited by more than 100,000 users during a period of three months. For each user, we extract detailed usage statistics, and distill this information in 74 unique features that model different aspects of the user's behavior. After the features are extracted, we perform a correlation analysis to see if any of them is correlated with the probability of visiting malicious web pages. Afterwards, we leverage machine learning techniques to provide a prediction model that can be used to estimate the risk class of a given user. The results of our experiments show that it is possible to predict with a reasonable accuracy (up to 87%) the users that are more likely to be the victims of web attacks, only by analyzing their browsing history.
Year
DOI
Venue
2014
10.1145/2590296.2590347
ASIACCS
Keywords
Field
DocType
miscellaneous,profiling,risk prediction,web browsing
World Wide Web,Leverage (finance),Web page,Profiling (computer programming),Computer security,Computer science,Vendor,Personally identifiable information,Web navigation,Correlation analysis
Conference
Citations 
PageRank 
References 
13
0.77
13
Authors
3
Name
Order
Citations
PageRank
Davide Canali12258.25
Leyla Bilge291143.78
Davide Balzarotti32040113.64