Mobile specific webpages differ significantly from their desktop counterparts in content, layout, and functionality. Accordingly, existing techniques to detect malicious websites are unlikely to work for such webpages. In this paper, we design and implement kAYO, a mechanism that distinguishes between malicious and benign mobile webpages. kAYO makes this determination based on static features of a webpage ranging from the number of iframes to the presence of known fraudulent phone numbers. First, we experimentally demonstrate the need for mobile specific techniques and then identify a range of new static features that highly correlate with mobile malicious webpages. We then apply kAYO to a dataset of over 350,000 known benign and malicious mobile webpages and demonstrate 90 percent accuracy in classification. Moreover, we discover, characterize, and report a number of webpages missed by Google Safe Browsing and VirusTotal, but detected by kAYO. Finally, we build a browser extension using kAYO to protect users from malicious mobile websites in real-time. In doing so, we provide the first static analysis technique to detect malicious mobile webpages
Dynamic approaches using virtual machines and honeyclient systems provide deeper visibility into the behavior of a webpage. Therefore, such systems have a very low false positive rate and are more accurate. However, downloading and executing each webpage impacts performance and hinders scalability of dynamic approaches. This performance penalty can be avoided by using static approaches. Static approaches rely on the structural and lexical properties of a webpage and do not execute the content of the webpage
HARDWARE SYSTEM REQUIREMENT
1. Processor - Pentium –III
2. Speed - 1.1 Ghz
3. RAM - 256 MB (min)
4. Hard Disk - 20 GB
5. Floppy Drive - 1.44 MB
6. Key Board - Standard Windows Keyboard
7. Mouse - Two or Three Button Mouse
8. Monitor - SVGA
S/W SYSTEM REQUIREMENT
1. Operating System : Windows 95/98/2000/NT4.0.
2. Application Server : Tomcat6.0
3. Front End : HTML, Java.
4. Scripts : JavaScript.
5. Server side Script : Java Server Pages.
6. Database : Mysql.
7. Database Connectivity: JDBC
.webp)
