arXiv preprint · Submitted 20 October 2026 · Revised 23 October 2026 · arXiv:2610.27675v2
CyberHull: Deterministic Malicious URL Isolation via Convex Hull
CyberHull builds convex boundaries around legitimate web behaviour using content entropy, semantic features, and hyperlink topology. Deterministic containment tests identify URLs that fall outside the learned regions.