基于CharacterBERT的恶意URL检测模型OA
CharacterBERT-based malicious URL detection model
传统URL检测方法主要依赖黑名单和启发式规则,在应对新型URL变体时存在局限.随着BERT模型被引入恶意URL检测领域,仍存在词汇表依赖、未登录词处理能力不足、语义细粒度较低等问题.为此,文中提出一种基于CharacterBERT与URL结构特征相融合的恶意URL检测模型.该模型采用字符级卷积神经网络(CharacterCNN),摆脱对预定义词汇表的依赖,并通过可变形卷积核提取更精细的语义信息.此外,设计了门控融合网络单元,结合子域名数量、敏感词、URL长度等结构信息来增强恶意URL识别能力.实验结果表明,所提模型在Grambeddings和kaggle_1数据集上均取得了最佳性能,F1 值分别达到97.88%和99.83%,展现出卓越的性能,在实际安全场景中具有较高的应用价值.
Traditional URL detection methods relying on blacklists and heuristic rules exhibit limitations when confronting new URL variants.Although the BERT(bidirectional encoder representations from transformers)model has been introduced into the field of malicious URL detection,it still faces issues like vocabulary dependence,poor handling ability of unlisted vocabulary terms,and insufficient semantic granularity.In view of the above,this paper introduces a novel malicious URL detection model integrating CharacterBERT with URL structural features.In the model,a character-level convolutional neural network(CharacterCNN)is employed to eliminate the dependency on predefined vocabularies,and deformable convolution kernels are used to extract finer semantic information.Additionally,a gated fusion network unit is developed to integrate structural features such as sub-domain quantity,sensitive word,and URL length,so as to enhance the ability to identify malicious URLs.Experimental results show that the datasets Grambeddings and kaggle_1 demonstrate the superior performance of the model,with F1-scores of 97.88%and 99.83%,respectively.To sum up,the proposed model shows outstanding detection performance and has high application value in practical security scenarios.
王旭;李松朔;姜久雷;乐德广
北方民族大学 计算机科学与工程学院,宁夏 银川 750021||苏州工学院 计算机科学与工程学院,江苏 苏州 215500北方民族大学 计算机科学与工程学院,宁夏 银川 750021苏州工学院 计算机科学与工程学院,江苏 苏州 215500苏州工学院 计算机科学与工程学院,江苏 苏州 215500
信息技术与安全科学
CharacterBERT特征融合恶意URL检测网络安全字符级卷积神经网络金字塔注意力
CharacterBERTfeature fusionmalicious URL detectioncybersecurityCharacterCNNpyramid attention
《现代电子技术》 2026 (5)
83-88,96,7
国家自然科学基金地区科学基金项目(61762002)
评论