Detecting Malicious Queries from Search Engine Traffic

Search Engines not only provides internet users with useful information, but also helps hackers find vulnerable websites to exploit. This paper presents an algorithm that detects malicious queries from search engine traffic. To evaluate our algorithm, we take 3000 queries from Google Hacking Database as seed, and detect malicious queries from Google traffic with a detection rate of 98.7% and a false positive rate of 2.9%. Experimental results show that the algorithm is effective on detecting and preventing latest types of attacks.