Detecting method and a device for fishing website

Abstract

The invention discloses a detecting method and a device for fishing website. The method comprises the following steps: detecting device obtains the final page information according to the received URL request; analyzing the final page information of the website; as the DOM tree structure and building the index for the label according to the final page information in DOM tree structure; extracting the characteristic of the final page information n the DOM tree structure according to the built index, traveling the pre-set characteristic database and matching the characteristic of the final page information and the referred characteristic in the database, outputting the referred characteristic; travelling the pre-set model database and finding the referred object in the model database according to the referred characteristic to confirm whether the website is the fishing website. The invention processes the detection for the page information by the website, which avoids the misinformation phenomenon in judging the page information to enhance the judging accuracy of the fishing website.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a method and device for detecting phishing websites. Background technique [0002] With the popularity of the Internet, more and more users begin to communicate and conduct business transactions through the Internet, and Internet services such as e-commerce, electronic banking, and online games have also developed accordingly. When a user visits a website, he needs to enter information such as account number and password. When the entered information such as account number and password is correct, the user can enter the website for online operations. The user's account number and password are the only identification for the user to enter these websites to operate. If someone steals the user's account number and password and enters the website as a user, it may cause infringement on the user's interests. Such as figure 1 As shown, in the use of the Internet, some criminals ...

AI Technical Summary

Problems solved by technology

[0012] Although there is the detection method of the above-mentioned phishing website, in the process of realizing the present invention, the inventor finds that there are at least the following problems in the prior art: methods such as detection based on the IP of the website, the domain name based on the website, and the port based on the website cannot be used because they cannot Detect the page information of the website, and false positives may occur in practice

However, the existing detection methods based on website page information only detect some specific problems, do not have universality, and cannot deal with various emerging phishing websites in real time.

Images