Method for Detecting Core Malware Sites Related to Biomedical Information Systems

Abstract

Most advanced persistent threat attacks target web users through malicious code within landing (exploit) or distribution sites. There is an urgent need to block the affected websites. Attacks on biomedical information systems are no exception to this issue. In this paper, we present a method for locating malicious websites that attempt to attack biomedical information systems. Our approach uses malicious code crawling to rearrange websites in the order of their risk index by analyzing the centrality between malware sites and proactively eliminates the root of these sites by finding the core-hub node, thereby reducing unnecessary security policies. In particular, we dynamically estimate the risk index of the affected websites by analyzing various centrality measures and converting them into a single quantified vector. On average, the proactive elimination of core malicious websites results in an average improvement in zero-day attack detection of more than 20%.

Potential Risk Analysis Method for Malware Distribution Networks

“…MDNs are intelligent malicious networks that are built by attackers to perform persistent cyberattacks on unspecified users or selected organizations. Specifically, MDNs are composed of various types of malicious URLs containing malware (including landing sites, exploit sites, hopping sites, and distribution sites) that have mutually dependent relationships [3], and they are normally in an attack posture that is determined by the strategy of the attacker.…”

Graph Based Classifier to Detect Malicious URL

“…Dom Kim et al [10], developed a method to identify malicious URLs of biomedical information system. This work dynamically estimates the risk index of the affected URL, by analyzing node characteristics, malicious code, IP address and country code.…”

Securing the Biometric through ECG using Machine Learning Techniques

“…Verification or identification biometric information systems can be either implemented on an existing system or built from scratch [1]. The verification method strives to validate an individual's claimed identity by checking their claims against several markers of individuality.…”