Chinese domain name similarity calculation method and counterfeit domain name detection method

Abstract

The invention discloses a Chinese domain name similarity calculation method and a counterfeit domain name detection method. The method comprises the following steps: (1) respectively generating Chinese character sets set 1 and set 2 of a domain name to be detected d1 and a target domain name d2; (2) determining a value of a mark flag according to a comparison result of the numbers of Chinese characters in the sets set 1 and set 2, and determining the similarities of n groups of similar character pairs included in the sets set 1 and set 2 and each group of similar character pairs; and (3) calculating the overall similarity value of the domain name d1 and the domain name d2 according to an influence value of conversion of Chinese characters with similar forms on the domain name to be detected d1 and the target domain name d2 and an influence value of word order exchange on the domain name to be detected d1 and the target domain name d2. If the overall similarity value is greater than a set threshold value, the domain name d1 is judged to be a counterfeit domain name of the domain name d2. The Chinese domain name similarity calculation method can effectively detect a Chinese counterfeit domain name based on replacement of Chinese character with similar forms and word order exchange, and has wide application prospects in the field of network security.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a method for calculating the similarity of Chinese domain names and a method for detecting counterfeit domain names. Background technique [0002] Chinese domain names are an important part of internationalized domain names, and domain name phishing attacks against Chinese domain names are increasing day by day, and domain name phishing forms are becoming more and more complex. The rules of Chinese character creation make it produce a large number of similar characters, and because of people's reading inertia, a certain degree of word order disorder does not affect the overall visual effect. [0003] Traditional domain name detection technology is only suitable for English domain names with relatively simple character system, and cannot effectively detect Chinese domain names with a large character library and complex fonts. Currently, research in this field ...

AI Technical Summary

Problems solved by technology

This method can effectively identify counterfeit domain names constructed using near-characters, but if the attacker swaps the sequence of characters in the domain name on the basis of using near-characters, the above detection method will no longer be applicable

Images