Malicious URL (unified resource locator) authenticating method and device

Abstract

The embodiment of the invention discloses a malicious URL (unified resource locator) authenticating method and a malicious URL authenticating device. The authenticating method comprises the steps that a URL contained in the content of a communication message is matched with a preset URL blacklist; if the URL is successfully matched, a risk prompt is generated, if not, the IP address of a sending end of the communication message is matched with a preset IP (internet protocol) blacklist; and if the IP is successfully matched, a risk prompt is generated. The malicious URL (unified resource locator) authenticating method and the authenticating device can remind a user after the user receives the communication message containing the malicious URL. In the technical scheme of the embodiment, the malicious URL can be authenticated without authenticating the website content of the malicious URL, so that the authentication effect of the malicious URL is effectively improved.

Description

technical field [0001] The invention relates to the field of computer security, and more specifically, to a malicious URL identification method and device. Background technique [0002] URL (Uniform Resource Locator, Uniform Resource Locator), also known as webpage address, referred to as URL, is the address of a standard resource on the Internet. Through the URL, the user can access the corresponding web page content in the network. Malicious URLs refer to various fraudulent, counterfeiting, phishing or horse-mounted webpages. When users accidentally visit such webpages, they may cause economic losses to users, leak personal privacy information, or infect the current computer with Trojan horse viruses. and other adverse effects. [0003] The current security software can warn the user after identifying the malicious URL by identifying the malicious URL, so as to protect the safety of the user. [0004] In the prior art, identification of malicious URLs is mainly based on...

AI Technical Summary

Problems solved by technology

However, the inventor found through research that in this way in the prior art, hackers can use complex coding, page encryption, JS multiple jumps, and use loopholes in large websites to upload counterfeit QQ space phishing pages, etc., so that Basically, there is no need to display text on the page, thus avoiding the above-mentioned detection methods, thereby reducing the identification effect of malicious URLs

Images