| Title | Understanding Abusive Web Resources: Characteristics and Counter-measures of Malicious Web Resources and Cryptocurrency Mining |
| Publication Type | Conference Paper |
| Year of Publication | 2018 |
| Authors | Dao, Ha, Mazel, Johan, Fukuda, Kensuke |
| Conference Name | Proceedings of the Asian Internet Engineering Conference |
| Publisher | ACM |
| Conference Location | New York, NY, USA |
| ISBN Number | 978-1-4503-6131-6 |
| Keywords | compositionality, Human Behavior, in-browser mining, Metrics, privacy, pubcrawl, Resiliency, Web Browser Security, web security |
| Abstract | Web security is a big concern in the current Internet; users may visit websites that automatically download malicious codes for leaking user's privacy information, or even mildly their web browser may help for someone's cryptomining. In this paper, we analyze abusive web resources (i.e. malicious resources and cryptomining) crawled from the Alexa Top 150,000 sites. We highlight the abusive web resources on Alexa ranking, TLD usage, website geolocation, and domain lifetime. Our results show that abusive resources are spread in the Alexa ranking, websites particularly generic Top Level Domain (TLD) and their recently registered domains. In addition, websites with malicious resources are mainly located in China while cryptomining is located in USA. We further evaluate possible counter-measures against abusive web resources. We observe that ad or privacy block lists are ineffective to block against malicious resources while coin-blocking lists are powerful enough to mitigate in-browser cryptomining. Our observations shed light on a little studied, yet important, aspect of abusive resources, and can help increase user awareness about the malicious resources and drive-by mining on web browsers. |
| URL | http://doi.acm.org/10.1145/3289166.3289174 |
| DOI | 10.1145/3289166.3289174 |
| Citation Key | dao_understanding_2018 |
Understanding Abusive Web Resources: Characteristics and Counter-measures of Malicious Web Resources and Cryptocurrency Mining