Method and device for detecting maliciousness of wireless network

Abstract

The invention discloses a method for detecting maliciousness of a wireless network. The method comprises the steps of sending a domain name resolution request to a DNS (Domain Name System) server through an access point of the wireless network when a mobile terminal accesses the wireless network, wherein the domain name resolution request carries preset domain name data; obtaining an IP address obtained by analyzing the domain name data through the DNS server, judging whether the IP address matches a preset IP address or not and recording a first judgment result; initiating a first network access request according to the IP address, judging whether a malicious script is injected into the responded first network access request or not and recording a second judgment result; and analyzing and judging the maliciousness of the wireless network according to the first judgment result and the second judgment result. The invention also discloses a device for detecting the maliciousness of the wireless network and the security of surfing the Internet through the wireless network by the user is improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for detecting maliciousness of a wireless network. Background technique [0002] Supermarkets, stores, coffee shops, airports and other public places often have public wireless networks, the most commonly used of which is WIFI. Public places use one or more APs (Access Points) to achieve WIFI within a preset range coverage, providing users with a convenient Internet environment. [0003] However, the security of WIFI in public places is generally poor, and some malicious WIFI can easily lead to the leakage of users' personal information. For example, the attacker builds a malicious AP and assigns the IP address of a malicious DNS (Domain Name System, Domain Name System) proxy to the client through the DHCP (Dynamic Host Configuration Protocol) server of the malicious AP. When surfing the Internet, the malicious DNS proxy will resolve the client's do...

AI Technical Summary

Problems solved by technology

[0003] However, the security of WIFI in public places is generally poor, and some malicious WIFI can easily lead to the leakage of users' personal information

For example, the attacker builds a malicious AP and assigns the IP address of a malicious DNS (Domain Name System, Domain Name System) proxy to the client through the DHCP (Dynamic Host Configuration Protocol) server of the malicious AP. When surfing the Internet, the malicious DNS proxy will resolve the client's domain name request to the malicious WEB proxy, and the malicious WEB proxy will implant malicious scripts into the corresponding network data packets, thereby luring users to illegal websites, and implementing illegal activities such as packet capture and sniffing, phishing, etc. The act of stealing users' personal information will lead to users inadvertently leaking personal information, which seriously threatens users' online security. At present, there is still a lack of an effective method to detect the maliciousness of WIFI

Images