Anti-counterfeiting method for web page

Abstract

The invention provides an anti-counterfeiting method for a web page. The method comprises the following steps of: changing the dynamic web page in a website into a static web page, and embedding a concealed digital signature into the web page; when a user browses the web page, automatically loading a browser plug-in provided by the website, and inputting personal information during installing the plug-in; detecting whether the web page is from the website, detecting the digital signature of the web page from the website and judging whether the web page is the original web page by the plug-in; directly intercepting the non-original web page and giving an alarm by the plug-in; displaying the personal information input by the user at the same time of displaying the original web page on a browser; and when the user will log in the website and discovers the personal information is not correctly displayed, determining that the current website is a counterfeited angling website. By the method, the problem that most methods depending on known rule bases lack defense capacity on novel angling attacks and latest angling websites in the prior art is solved.

Description

technical field [0001] The invention relates to network security technology, in particular to a web page anti-counterfeiting method. Background technique [0002] With the continuous development of information technology and the wide application of e-commerce, phishing activities are becoming more and more rampant, counterfeit websites continue to appear, and attack techniques emerge in endlessly. Attackers use methods such as spoofed emails and fake web pages to prompt users to enter confidential information, thereby stealing users' financial data. In recent years, the main counterfeiting targets of phishing are famous financial transaction websites and security agencies at home and abroad. Rampant fraudulent activities have made the fast-growing online banking business encounter difficulties. [0003] Most of the currently commonly used anti-counterfeiting and anti-phishing methods for web pages are based on known information, which can be roughly divided into the followi...

AI Technical Summary

Problems solved by technology

[0009] Aiming at the problem existing in the prior art that relies on existing phishing attack features and phishing website databases and cannot defend against unknown new attacks, the present invention proposes a web page anti-counterfeiting method combining visualization and code detection, which can effectively prevent illegal The counterfeit pages of the website that have been illegally tampered with and remind users that the webpage they browse is a counterfeit website from other URLs

Images