Detection method for phishing site

Abstract

The invention provides a detection method for a phishing site. The method comprises the following steps of: firstly, extracting a backward link set of a known trusted site set and a backward link set of a known phishing site set through a backward link, and forming a network topology structure set by using each set; secondly, calculating the credibility of a site in the network topology structure set by combining a PageRank-based web page credibility algorithm and a mode recognition method to obtain a credibility database; thirdly, extracting a backward link set of a site to be detected, and searching for the credibility of a web page in the backward link set of the site to be detected from the credibility database to obtain the credibility of the site to be detected; and finally, determining the site to be detected as the phishing site if the credibility of the site to be detected is lower than a preset threshold value. According to the method, an interconnection relationship between the sites is utilized, the phishing site can be effectively detected in real time, and the method is difficult to break by malicious attacks.

Description

Technical field [0001] The invention belongs to the technical field of computer network security, and in particular relates to a method for detecting phishing websites. Background technique [0002] Phishing is the criminal fraudulent process of attempting to obtain sensitive personal information such as usernames, passwords and credit card details from electronic communications by masquerading as a reputable legal entity. A typical phishing attack is to send fraudulent spam emails claiming to be from a certain bank, luring recipients to click on a webpage pretending to be the bank, and asking users to enter personal information such as user name, password, bank account number or credit card password. [0003] Since the emergence of phishing attacks, the number of phishing attacks has continued to increase rapidly in recent years, the scope has continued to rapidly expand, and the types have emerged in an endless stream, causing rapid expansion of damage. Phishing sites hav...

AI Technical Summary

Problems solved by technology

[0010] The purpose of the present invention is to solve the problem that phishing website detection is easily bypassed in the prior art and the problem that the false negative rate of detection is too high, and proposes a phishing website detection method, which uses the PageRank idea in search technology and website interconnection to establish The credit mechanism of the website can effectively detect phishing websites in real time, and is not easy to be broken by malicious attacks

Images