Method and system for automatically detecting phishing aiming at added domain name

Abstract

The invention relates to a method and a system for automatically detecting phishing aiming at an added domain name. The method comprises the following steps: 1) reading a full amount of domain name registration database, calculating a domain name increment according to results obtained by reading for successive two times and then expanding the added domain name into an added URL (Uniform Resource Locator) as a to-be-detected data source; 2) obtaining a webpage text content of the added URL as a basis for phishing website identification; 3) representing different parts of the obtained webpage text content as feature vectors; 4) combining the feature vectors for representing the different parts of the obtained webpage text content into a full text feature vector, calculating the phishing probability of the full text feature vector by utilizing weight information obtained through sorting algorithm learning and further generating a list of the suspected phishing URL. The invention provides the simple and effective method for obtaining the added domain name; the method is applied to automatic detection and identification of the phishing, so that the identification time of a phishing website can be shortened, the detection scope is expanded, and the identification misdetection rate is reduced.

Description

Technical field [0001] The invention belongs to the field of network technology and information security technology, and specifically relates to a method and system for automatically detecting phishing for newly added domain names. Background technique [0002] Phishing is an online identity forgery fraud. It uses social engineering, technical disguise and other attack methods to defraud users’ trust. By sending deceptive information purporting to come from banks or other well-known institutions, they are intended to lure users to log in and A fake website very similar to the real website to steal sensitive information such as the user's personal identity data and financial account number. With the rapid development of Internet technology and the increasing popularity of e-commerce, more and more commercial activities have begun to conduct online transactions. With the increase in transaction amount, the harm of phishing has become more and more serious. Therefore, the automatic...

AI Technical Summary

Problems solved by technology

[0005] On the other hand, the currently popular phishing website identification method is based on heuristic learning technology, which identifies phishing attacks by analyzing the characteristics of web page content. This method has high accuracy, but it cannot guarantee the comprehensiveness of detection. It is easy to miss the judgment. To solve this problem, the present invention proposes a weighting method based on the feature position to reduce the missed judgment rate

Images