Phishing website detection method and equipment

Abstract

The invention, which belongs to the internet security field, discloses a phishing website detection method and equipment. The method comprises: at least one piece of preset characteristic information of a to-be-detected website is obtained, wherein the preset characteristic information is used for detecting whether the to-be-detected website is a suspicious phishing website; a risk value of each piece of preset characteristic information is obtained and whether the to-be-detected website is a suspicious phishing website is determined based on a plurality of risk values; if so, a webpage content of the to-be-detected website is detected and whether the to-be-detected website is a suspicious phishing website is determined based on a webpage content detection result; and if the webpage content detection result can not determine that the to-be-detected website is a suspicious phishing website, manual detection is carried out. According to the detection method, whether the to-be-detected website is a suspicious phishing website is determined based on the plurality of risk values and the webpage content of the suspicious website is detected; and when the to-be-detected website is a suspicious phishing website and the webpage content detection result is not accurate, manual detection is carried out, so that the phishing website detection efficiency can be improved and the network security can be enhanced.

Description

technical field [0001] The invention relates to the field of Internet security, in particular to a method and equipment for detecting phishing websites. Background technique [0002] With the rapid development of Internet technology, some businesses based on online transactions, such as e-commerce and e-banking, have also developed rapidly, and the subsequent network security problems, mainly phishing websites, have become increasingly prominent. Establish a website on the Internet, pretend to be a service webpage such as a bank and e-commerce, steal private information such as bank account numbers and passwords submitted by users, and cause serious harm to the property of Internet users. [0003] The current phishing website detection method is mainly blacklist filtering technology. The blacklist filtering technology mainly relies on continuously updating the blacklist including all known phishing websites and / or websites reported by users, and then when detecting suspicio...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of Internet technology, some businesses based on online transactions, such as e-commerce and e-banking, have also developed rapidly, and the subsequent network security problems, mainly phishing websites, have become increasingly prominent. Establish a website on the Internet, pretend to be a bank and e-commerce service webpage, steal the bank account number, password and other private information submitted by the user, and cause serious harm to the property of Internet users

Images