Method and device for identifying phishing websites

Abstract

The embodiment of the invention discloses a method and device for identifying phishing websites. Wherein, the method includes intercepting a data packet containing user personal information from a user terminal; using DPI technology to analyze the captured data packet, and removing the user personal information in the data packet according to keywords in the data packet; randomly constructing New user personal information, and replace it into the user personal information domain corresponding to each keyword; forward the data packet containing user personal information after the removal and replacement operations to the target website; receive the response from the target website, and Determine whether the target website is a phishing website according to the response. The embodiment of the present invention can immediately intercept data packets before user information is exposed to phishing websites, and can identify which websites are phishing websites without any prior knowledge of the user, and has universal applicability for preventing various phishing websites.

Description

technical field [0001] The invention relates to network security, in particular to a method and device for identifying phishing websites. Background technique [0002] With the continuous improvement of Internet popularity and the rapid development of e-commerce, user account security has risen to an unprecedented important position. Although the anti-virus and anti-intrusion application software has a considerable scale, there are still a group of criminals who use various clever methods to illegally obtain user information and account passwords, and phishing websites are the one with the strongest rising momentum in recent years. [0003] Phishing websites take advantage of weak security awareness of users, adopt similar domain names and pages, etc., and then lure profit (for example, winning prizes, giving virtual property, etc.), so that users expose their account information and privacy without knowing it (for example, , ID number, mobile phone number, bank card number...

AI Technical Summary

Problems solved by technology

[0008] (3) Take some wrong accounts to try: phishing websites have poor ability to identify wrong accounts. Regardless of whether the user enters right or wrong, the general response is the same, including displaying that the page cannot be opened, login is successful, and jump to the regular website, etc.

[0009] The above methods can identify most phishing websites, but they have high requirements for users' security awareness and handling experience, and lack of practicability

Images