Malicious Hidden Redirect Attack Web Page Detection Based on CSS Features

Malicious web pages that host drive-by-download exploits have become more and more popular with the development of the Internet. Attackers increasingly redirect access to regular pages to attack pages for malware downloads. Meanwhile, its CSS properties are modified to avoid changes in the visual effects of regular pages. In this paper, new CSS features are proposed for this malicious hidden redirected attack web page, and theoretical analysis and experimental verification are carried out. The results show that the accuracy of the method for malware downloading web pages reaches a high level, and especially the classification accuracy rate of malicious web pages using redirection reaches 98%-99%, which indicates the significance of this research and the effectiveness of the experimental method.