Method for judging phishing websites based on non-content analysis

Abstract

The invention provides a method for judging phishing websites based on non-content analysis, which comprises a server side and a client side, wherein the server side is provided with a black list, a white list, a high-risk domain database and a rule base. The method includes: using the server side to receive URL (uniform resource locator) data of unknown websites transmitted by the client side, judging the black list and the white list, comparing the URL data with data in the high-risk domain database if the URL data are not included in the black list and the white list, comparing the URL data with data in the rule base if the URL data are consistent with the data in the high-risk domain database, judging based on the high-risk domain database, the rule base and key information, and finally returning results to the client side. By the aid of the phishing website judging method, phishing website judging speed can be greatly increased, the shortcoming that an existing URL judging method fails for phishing websites emerging for the first time can be overcome, and the method has the advantages of convenience, rapidness, high efficiency and wide applicability.

Description

Technical field [0001] The invention relates to a method for judging a phishing website, in particular to a method for judging a phishing website based on non-content analysis. Background technique [0002] The so-called "phishing website" is a kind of online fraud, which means that criminals use various means to imitate the URL address and page content of the real website, or use the loopholes in the server program of the real website to insert dangerous HTML into some web pages of the site The code is used to defraud the user's bank or credit card account number, password and other private information, and to obtain further economic benefits with the defrauded user information. [0003] "Phishing websites" have recently appeared frequently around the world, seriously affecting the development of online financial services and e-commerce, harming public interests, and affecting the public's confidence in using the Internet. Phishing websites usually pretend to be bank websites and...

AI Technical Summary

Problems solved by technology

To identify the content of the website, it is necessary to send the website information to the server, and the server will identify the content of the website according to its massive data and super computing power, and then send the judgment result to the client, which requires a certain amount of processing time; for Based on URL judgments, security service providers need to establish a complete database of phishing websites, collect known phishing website URL samples as much as possible, and make judgments based on known URL samples to identify URLs. There is no corresponding sample in the service provider's database, and it is impossible to give an early warning for the first phishing website

Images