Toward More Generalized Malicious URL Detection Models

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Tsai, YunDa, Liow, Cayon, Siang, Yin Sheng, Lin, Shou-De
Format: Preprint
Publié: 2022
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866909099672731648
author Tsai, YunDa
Liow, Cayon
Siang, Yin Sheng
Lin, Shou-De
author_facet Tsai, YunDa
Liow, Cayon
Siang, Yin Sheng
Lin, Shou-De
contents This paper reveals a data bias issue that can severely affect the performance while conducting a machine learning model for malicious URL detection. We describe how such bias can be identified using interpretable machine learning techniques, and further argue that such biases naturally exist in the real world security data for training a classification model. We then propose a debiased training strategy that can be applied to most deep-learning based models to alleviate the negative effects from the biased features. The solution is based on the technique of self-supervised adversarial training to train deep neural networks learning invariant embedding from biased data. We conduct a wide range of experiments to demonstrate that the proposed strategy can lead to significantly better generalization capability for both CNN-based and RNN-based detection models.
format Preprint
id arxiv_https___arxiv_org_abs_2202_10027
institution arXiv
publishDate 2022
record_format arxiv
spellingShingle Toward More Generalized Malicious URL Detection Models
Tsai, YunDa
Liow, Cayon
Siang, Yin Sheng
Lin, Shou-De
Machine Learning
Cryptography and Security
This paper reveals a data bias issue that can severely affect the performance while conducting a machine learning model for malicious URL detection. We describe how such bias can be identified using interpretable machine learning techniques, and further argue that such biases naturally exist in the real world security data for training a classification model. We then propose a debiased training strategy that can be applied to most deep-learning based models to alleviate the negative effects from the biased features. The solution is based on the technique of self-supervised adversarial training to train deep neural networks learning invariant embedding from biased data. We conduct a wide range of experiments to demonstrate that the proposed strategy can lead to significantly better generalization capability for both CNN-based and RNN-based detection models.
title Toward More Generalized Malicious URL Detection Models
topic Machine Learning
Cryptography and Security
url https://arxiv.org/abs/2202.10027