blackhat-arsenal-tools/network_defense/luda.md

LUDA: Large URLs Dataset Analyzer for security

Description

Malicious actors often reuse code to deploy their malware, phishing website or CNC server. As a result, similiaries can be found on URLs path by inspecting internet traffic. Moreover, deep learning models or even regular ML model do not fit for inline deployment in terms of running performance. However, regexes ( or YARA rules ) can be deployed on a proxy and work in real time on all the traffic. LUDA can take a set of malicious and benign URLs and return a list of regexes ready to be deployed inline !

Categories

• Network Defense

Black Hat sessions

Popularity

To be completed

Code

https://github.com/akamai/luda

Lead Developer(s)

Code: Jordan Garzon Algorithm: Jordan Garzon and Asaf Nadler

from Akamai Technologies