Phishing website detecting method and system

Abstract

The invention provides a phishing website detecting method. The method comprises that in a black list of phishing websites is searched for information of a website to be detected; if the information of the website to be detected is not matched correspondingly in the black list, a target webpage group is searched for the information of the website to be detected; if the information of the website to be detected is not matched correspondingly in the target webpage group, the similarity between the website to be detected and each webpage in the target webpage group is calculated; and if the similarity is greater than or equivalent to a preset threshold, the target webpage group is searched for a target webpage which is most similar to the website to be detected, a network community of the target webpage is obtained, and if the website to be detected is not included in the network community, the website to be detected is determined to be a phishing website. Thus, a black list method is combined with a webpage similarity method, and the network community of the target website is introduced to screen suspected websites further, so that a result is more accurate.

Description

technical field [0001] The invention relates to the technical field of website security detection, in particular to a method and system for detecting phishing websites. Background technique [0002] With the popularization of science and technology, network communication technology has penetrated into various fields with an irreplaceable position, and network security problems have become increasingly serious, among which the problem of phishing websites is particularly prominent. Phishing websites are highly disseminated, and researchers at home and abroad are doing their best to conduct research on anti-phishing. A common practice is to set a blacklist. When a client browser accesses a certain website, it first checks whether the website is in the blacklist. If it is, it is determined to be a phishing website, otherwise it is a legitimate website. [0003] In practical applications, suspicious phishing websites are usually detected based on the reported information provid...

AI Technical Summary

Problems solved by technology

[0003] In practical applications, suspicious phishing websites are usually detected based on the reported information provided by users. Therefore, most of these methods can only work after the user has been violated by phishing websites, which has a certain lag and cannot be detected before the blacklist is updated. out the latest phishing sites

Images