mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-02-03 23:40:14 +08:00
[提交译文][tech]: 20220429 Detect a Phishing URL Using Machine Learning in Python.md
This commit is contained in:
lkxed
parent
1898e47a22
commit
1176e9d643
@ -1,92 +0,0 @@
|
||||
[#]: subject: "Detect a Phishing URL Using Machine Learning in Python"
|
||||
[#]: via: "https://www.opensourceforu.com/2022/04/detect-a-phishing-url-using-machine-learning-in-python/"
|
||||
[#]: author: "Jishnu Saurav Mittapalli https://www.opensourceforu.com/author/jishnu-saurav-mittapalli/"
|
||||
[#]: collector: "lkxed"
|
||||
[#]: translator: "lkxed"
|
||||
[#]: reviewer: " "
|
||||
[#]: publisher: " "
|
||||
[#]: url: " "
|
||||
|
||||
Detect a Phishing URL Using Machine Learning in Python
|
||||
======
|
||||
In a phishing attack, a user is sent a mail or a message that has a misleading URL, using which the attacker can collect important data like the passwords of the banks your money is in. This article gives a short tutorial on how to detect such phishing attempts.
|
||||
|
||||
![phishing attack][1]
|
||||
|
||||
Through phishing attacks, attackers acquire important credentials that can be used for getting access to your bank or other financial accounts. The URLs sent by the attacker look exactly the same as the original applications we use on a daily basis. That is why people often believe these and enter their personal details. A phishing URL can open a Web page that looks similar to the original login page of your bank. Detecting such URLs has become very important of late as such phishing attacks are becoming pretty common. So let’s see how we can check whether a URL is a misleading one or a genuine one using machine learning in Python, as it can help us see the code as well as the outputs. We will be using Jupyter Notebook. You can use Google Colab or Amazon Sagemaker too, if you are more comfortable with those.
|
||||
|
||||
### Download the data sets
|
||||
|
||||
To start, we will need the data set to work upon. You can download the data sets from the links given below.
|
||||
|
||||
*Genuine URLs: https://github.com/jishnusaurav/Phishing-attack-PCAP-analysis-using-scapy/blob/master/Phishing-Website-Detection/datasets/legitimate-urls.csv*
|
||||
|
||||
*Phishing URLs: https://github.com/jishnusaurav/Phishing-attack-PCAP-analysis-using-scapy/blob/master/Phishing-Website-Detection/datasets/phishing-urls.csv*
|
||||
|
||||
### Training the machine to predict
|
||||
|
||||
Once we have the data sets, we need to import the required libraries using the following lines of code:
|
||||
|
||||
```python
|
||||
import pandas as pd
|
||||
from sklearn.ensemble import RandomForestClassifier
|
||||
```
|
||||
|
||||
If you do not have the libraries, you can use* pip* to install the libraries, as shown in Figure 1.
|
||||
|
||||
![First few lines of the data set][2]
|
||||
|
||||
Once this is done, you can import the data sets and convert them into pandas dataframe for further processing using the following lines of code:
|
||||
|
||||
```python
|
||||
legitimate_urls = pd.read_csv(“/home/jishnusaurav/jupyter/Phishing-Website-Detection/datasets/legitimate-urls.csv”)
|
||||
phishing_urls = pd.read_csv(“/home/jishnusaurav/jupyter/Phishing-Website-Detection/datasets/phishing-urls.csv”)
|
||||
```
|
||||
|
||||
After successful import, we need to merge both the dataframes — the legitimate and the phishing ones, in order to make one data set. The first few lines of the merged data set are shown in Figure 2.
|
||||
|
||||
![Installing libraries][3]
|
||||
|
||||
We then drop the columns like path, protocol, etc, that we do not need for the purpose of prediction:
|
||||
|
||||
```python
|
||||
urls = urls.drop(urls.columns[[0,3,5]],axis=1)
|
||||
```
|
||||
|
||||
After this, we need to split the data set into testing and training parts using the following code:
|
||||
|
||||
```python
|
||||
data_train, data_test, labels_train, labels_test = train_test_split(urls_without_labels, labels, test_size=0.30, random_state=110)
|
||||
```
|
||||
|
||||
We now make a model using the random forest classifier from sklearn, and then use the fit function to train the model:
|
||||
|
||||
```python
|
||||
random_forest_classifier = RandomForestClassifier()
|
||||
random_forest_classifier.fit(data_train,labels_train)
|
||||
```
|
||||
|
||||
Once this is done, we can use the predict function to finally predict which URLs are phishing. The following line can be used for the prediction:
|
||||
|
||||
```python
|
||||
prediction_label = random_forest_classifier.predict(test_data)
|
||||
```
|
||||
|
||||
That is it! You have built a machine learning model that predicts if a URL is a phishing one. Do try it out. I am sure you will have fun.
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://www.opensourceforu.com/2022/04/detect-a-phishing-url-using-machine-learning-in-python/
|
||||
|
||||
作者：[Jishnu Saurav Mittapalli][a]
|
||||
选题：[lkxed][b]
|
||||
译者：[译者ID](https://github.com/译者ID)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://www.opensourceforu.com/author/jishnu-saurav-mittapalli/
|
||||
[b]: https://github.com/lkxed
|
||||
[1]: https://www.opensourceforu.com/wp-content/uploads/2022/03/phishing-attack-696x477.jpg
|
||||
[2]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-1-First-few-lines-of-the-data-set.jpg
|
||||
[3]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-2-Installing-libraries.jpg
|
||||
@ -0,0 +1,92 @@
|
||||
[#]: subject: "Detect a Phishing URL Using Machine Learning in Python"
|
||||
[#]: via: "https://www.opensourceforu.com/2022/04/detect-a-phishing-url-using-machine-learning-in-python/"
|
||||
[#]: author: "Jishnu Saurav Mittapalli https://www.opensourceforu.com/author/jishnu-saurav-mittapalli/"
|
||||
[#]: collector: "lkxed"
|
||||
[#]: translator: "lkxed"
|
||||
[#]: reviewer: " "
|
||||
[#]: publisher: " "
|
||||
[#]: url: " "
|
||||
|
||||
在 Python 中使用机器学习来检测钓鱼链接
|
||||
======
|
||||
在网络钓鱼攻击中，用户会收到一封带有误导性链接的邮件或信息，攻击者可以利用它来收集重要数据，比如你的银行卡密码。本文将会给出一个简短的教程，旨在介绍如何检测这种网络钓鱼的企图。
|
||||
|
||||
![网络钓鱼攻击][1]
|
||||
|
||||
通过网络钓鱼攻击，攻击者能够获得一些重要凭证，这些凭证可以用来进入你的银行或其他金融账户。攻击者发送的 URL 看起来与我们日常使用的原始应用程序完全相同。这也是人们经常相信它，并在其中输入个人信息的原因。钓鱼网址可以打开一个网页，它看起来与你的银行的原始登录页面相似。最近，这样的网络钓鱼攻击正变得相当普遍，所以，检测钓鱼链接变得非常重要。因此，我将介绍如何在 Python 中使用机器学习来检查一个链接是误导性的还是真实的，因为它可以帮助我们看到网页代码及其输出。注意，本文将使用 Jupyter Notebook。当然，你也可以使用 Google Colab 或 Amazon Sagemaker，如果你对这些更熟悉的话。
|
||||
|
||||
### 下载数据集
|
||||
|
||||
第一步，我们需要用于训练数据集。你可以从下面的链接中下载数据集。
|
||||
|
||||
*真实的链接：https://github.com/jishnusaurav/Phishing-attack-PCAP-analysis-using-scapy/blob/master/Phishing-Website-Detection/datasets/legitimate-urls.csv*
|
||||
|
||||
*钓鱼链接：https://github.com/jishnusaurav/Phishing-attack-PCAP-analysis-using-scapy/blob/master/Phishing-Website-Detection/datasets/phishing-urls.csv*
|
||||
|
||||
### 训练机器进行预测
|
||||
|
||||
当数据集下载完成，我们需要使用以下几行代码来导入所需的库：
|
||||
|
||||
```python
|
||||
import pandas as pd
|
||||
from sklearn.ensemble import RandomForestClassifier
|
||||
```
|
||||
|
||||
如果你没有这些库，你可以使用 `pip` 工具来安装这些库，如下图所示：
|
||||
|
||||
![使用 pip 工具安装依赖库][2]
|
||||
|
||||
当依赖安装完成，你就可以导入数据集，并将其转换为 `pandas` 数据框架，使用以下几行代码进一步处理：
|
||||
|
||||
```python
|
||||
legitimate_urls = pd.read_csv(“/home/jishnusaurav/jupyter/Phishing-Website-Detection/datasets/legitimate-urls.csv”)
|
||||
phishing_urls = pd.read_csv(“/home/jishnusaurav/jupyter/Phishing-Website-Detection/datasets/phishing-urls.csv”)
|
||||
```
|
||||
|
||||
在成功导入后，我们需要把这两个数据集合并，以便形成一个数据集。合并后的数据集的前几行如下图所示：
|
||||
|
||||
![合并后的数据集的前几行][3]
|
||||
|
||||
然后去掉那些我们不需要的列，如<ruby>路径<rt>path</rt></ruby>、<ruby>协议<rt>protocol</rt></ruby>等，以达到预测的目的：
|
||||
|
||||
```python
|
||||
urls = urls.drop(urls.columns[[0,3,5]],axis=1)
|
||||
```
|
||||
|
||||
在这之后，我们需要使用以下代码将数据集分成测试和训练两部分：
|
||||
|
||||
```python
|
||||
data_train, data_test, labels_train, labels_test = train_test_split(urls_without_labels, labels, test_size=0.30, random_state=110)
|
||||
```
|
||||
|
||||
接着，我们使用 `sklearn` 的随机森林分类器建立一个模型，然后使用 `fit` 函数来训练这个模型。
|
||||
|
||||
```python
|
||||
random_forest_classifier = RandomForestClassifier()
|
||||
random_forest_classifier.fit(data_train,labels_train)
|
||||
```
|
||||
|
||||
完成这些后，我们就可以使用 `predict` 函数来最终预测哪些链接是钓鱼链接。下面这行可用于预测：
|
||||
|
||||
```python
|
||||
prediction_label = random_forest_classifier.predict(test_data)
|
||||
```
|
||||
|
||||
就是这样啦！你已经建立了一个机器学习模型，它可以预测一个链接是否是钓鱼链接。试一下吧，我相信你会满意的！
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://www.opensourceforu.com/2022/04/detect-a-phishing-url-using-machine-learning-in-python/
|
||||
|
||||
作者：[Jishnu Saurav Mittapalli][a]
|
||||
选题：[lkxed][b]
|
||||
译者：[lkxed](https://github.com/lkxed)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://www.opensourceforu.com/author/jishnu-saurav-mittapalli/
|
||||
[b]: https://github.com/lkxed
|
||||
[1]: https://www.opensourceforu.com/wp-content/uploads/2022/03/phishing-attack-696x477.jpg
|
||||
[2]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-1-First-few-lines-of-the-data-set.jpg
|
||||
[3]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-2-Installing-libraries.jpg
|
||||
Loading…
Reference in New Issue
Block a user