Anti-phishing method based on multi-factor comprehensive assessment method

Abstract

The invention relates to an anti-phishing method based on a multi-factor comprehensive assessment method. The method comprises the following steps: step a, establishing a blacklist and whitelist library of URL (uniform resource locator), and processing a target URL, judging whether the processed URL is in the blacklist / whitelist, if so, executing the step d, directly feeding back a result to the user; otherwise, executing the step b, subsequently detecting the website; step b, detecting four aspects of the website: URL angle recognition, website behavior and detail feature recognition, server angle recognition and crawler angle recognition; step c, summarizing and affirming the feedback result; and step d, displaying a result. The method provided by the invention can be used for assessing in many ways with strict procedure; the consideration is comprehensive and the accuracy is high; the hit suspects and corresponding weight value, searched webpage link, website file and judgment criterion are displayed in a graphical interface in a simple and clear mode , the result is available for related professional for examining while being fed back to the user.

Description

technical field [0001] The invention relates to an evaluation method for preventing phishing attacks, in particular to an anti-phishing method based on a multi-factor comprehensive evaluation method. Background technique [0002] At present, Internet fraud incidents occur frequently, threatening the privacy and security of users. According to statistics, in the first half of 2010 alone, direct and indirect economic losses caused by phishing to the public and society exceeded 12 billion yuan. How to prevent phishing attacks (Phishing attack) is imminent. At present, security software has a single method for identifying phishing websites based on URL, which does not involve the essence of phishing websites; black and white list identification is lagging, and phishing websites frequently change URLs. This method is a passive anti-phishing method that sacrifices the interests of some users. ; The efficiency and speed of recognition based on page features are very low, and it i...

AI Technical Summary

Problems solved by technology

At present, security software has a single method for identifying phishing websites based on URL, which does not involve the essence of phishing websites; black and white list identification is lagging, and phishing websites frequently change URLs. This method is a passive anti-phishing method that sacrifices the interests of some users. ; The efficiency and speed of recognition based on page features are very low, and it is easy for phishers to disguise and break through the detection. In addition, such solutions all face a common problem, that is, while maintaining a high recognition rate, it is usually accompanied by a high false positive rate

Therefore, the existing traditional anti-phishing methods are obviously powerless in the face of ever-changing threats

Images