Method and device for identifying malicious website

Abstract

The invention discloses a method and a device for identifying a malicious website. The method comprises the steps of obtaining identity information of a to-be-accessed website; matching the identity information with malicious key words in a pre-stored key word bank; in the case of successful matching, identifying the website as the malicious website. No matter whether the malicious website is known or unknown, the malicious website can be identified through the method and the device for identifying the malicious website; the defect that only the known websites can be identified in the prior art is overcome.

Description

technical field [0001] The invention relates to the field of the Internet, in particular to a method and device for identifying a malicious website. Background technique [0002] Malicious websites are illegal websites such as viruses, worms, and Trojan horses that intentionally perform malicious tasks on a computer system. These types of websites all have a common feature, they usually allow people to browse the content of the page normally in the form of a certain web page, and at the same time illegally obtain various data in the user's computer. Nowadays, malicious websites are the main factor affecting the user's network environment, and their identification has become one of the important tasks to ensure network security. At present, the following two technologies are usually used to identify malicious websites. [0003] The first type is to store the IP (Internet Protocol, protocol for interconnection between networks) address of the malicious website and the corresp...

AI Technical Summary

Problems solved by technology

[0005] However, both of the above two technologies are based on URL comparison, which requires pre-obtaining and storing URLs of malicious websites. Therefore, only known malicious websites can be identified and filtered, and unknown malicious websites cannot be identified and filtered. deal with

Images