Can I read MANTIS: Detection of Zero-Day Malicious Domains Leveraging Low Reputed Hosting Infrastructure on EtoBox?

MANTIS: Detection of Zero-Day Malicious Domains Leveraging Low Reputed Hosting Infrastructure by Deniz, Fatih; Nabeel, Mohamed; Yu, Ting; Khalil, Issa is a scholarly article available to read on EtoBox.

What is MANTIS: Detection of Zero-Day Malicious Domains Leveraging Low Reputed Hosting Infrastructure about?

Internet miscreants increasingly utilize short-lived disposable domains to launch various attacks. Existing detection mechanisms are either too late to catch such malicious domains due to limited information and their short life spans or unable to catch them due to evasive techniques such as cloaking and captcha. In this work, we investigate the possibility of detecting malicious domains early in their life cycle using a content-agnostic approach. We observe that attackers often reuse or rotate hosting infrastructures to host multiple malicious domains due to increased utilization of automation and economies of scale. Thus, it gives defenders the opportunity to monitor such infrastructure to identify newly hosted malicious domains. However, such infrastructures are often shared hosting environments where benign domains are also hosted, which could result in a prohibitive number of false positives. Therefore, one needs innovative mechanisms to better distinguish malicious domains from benign ones even when they share hosting infrastructures. In this work, we build MANTIS, a highly accurate practical system that not only generates daily blocklists of malicious domains but also is abl

Author

Deniz, Fatih; Nabeel, Mohamed; Yu, Ting; Khalil, Issa

Published

2025

Language

EN