SiNMULI: Novel Signed Network Approach for Malicious URL Identification
Using social networks to spot malicious websites instead of analyzing their content
Researchers developed a new method to identify dangerous websites by analyzing the links pointing to them—treating the problem like a social network where connections between websites are either trustworthy or suspicious. The approach achieved 99.89% accuracy on real-world data and works without needing to learn from labeled examples, making it more adaptable than existing techniques as attackers change their tactics.
Phishing scams and malware distribution cost individuals and businesses billions annually. This method could be deployed immediately without requiring constant retraining, and because it analyzes link patterns rather than website content, it resists evasion techniques that criminals use to hide their true purpose. It also explains why it flagged a site as dangerous—crucial for security teams investigating alerts.