{'fraction_non_alphanumeric': 0.017699115044247787, 'fraction_numerical': 0.0019665683382497543, 'mean_word_length': 5.3625, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
A Three-Step Framework for Detecting Malicious URLs

In order to solve the shortcomings of using blacklist method to detect malicious URLs, such as slow update speed, the research of using machine learning to detect malignant URLs are increasing. These researches have proposed their own methods and obtained great accuracy, but the summary research on malicious URLs detection is insufficient. In this paper, we propose a three-step framework for malicious URLs detection and we overview 14 related works by our three-step framework and find that almost all researches of malicious URLs detection using machine learning can be classified by three-step framework. We evaluate some machine learning models and context-considering methods and their suitability by our three-step framework. According to the results, we verify the importance of considering context and find that context-considering embedding methods are more important and the malicious URLs detection accuracy improved with context-considering methods.