| | |
Summary: deSEO: Combating Search-Result Poisoning
John P. John,
, Fang Yu§
, Yinglian Xie§
, Arvind Krishnamurthy
, Mart´in Abadi§
University of Washington §
MSR Silicon Valley
{jjohn, arvind}@cs.washington.edu {fangyu, yxie, abadi}@microsoft.com
Abstract
We perform an in-depth study of SEO attacks that
spread malware by poisoning search results for popular
queries. Such attacks, although recent, appear to be both
widespread and effective. They compromise legitimate
Web sites and generate a large number of fake pages
targeting trendy keywords. We first dissect one exam-
ple attack that affects over 5,000 Web domains and at-
tracts over 81,000 user visits. Further, we develop de-
SEO, a system that automatically detects these attacks.
|
