Phishing website detection method and system in Android environment

Abstract

The invention discloses a phishing website detection method and system in an Android environment, and the method comprises the following steps: obtaining a website URL when a cellphone user browses a webpage, and transmitting the website URL to a server; obtaining the webpage contents when the server receives the URL transmitted by a client, and constructing a feature vector according to the URL and the webpage contents; carrying out the clustering of K-means through a sample dataset, forming two clustering centers, and training a naive Bayes algorithm; discriminating the feature vector through an algorithm combining the K-means and an improved naive Bayes algorithm, and transmitting a discriminating result to a client user; enabling the client user to give a corresponding prompt according to a returned result, displaying a prompt box for reminding a user if a website is a phishing website, or else browsing the webpage normally. The method makes the most of the advantages that the K-means algorithm is high in clustering speed and the naive Bayes algorithm is high in accuracy, and greatly improves the classification speed and precision.

Description

technical field [0001] The invention belongs to the technical field of computer software and mobile security, and in particular relates to a method for detecting phishing websites in an Android environment and a detection system thereof. Background technique [0002] According to data, the number of mobile Internet users in China has exceeded 1 billion in 2017, an increase of nearly 20% compared to 2016. It can be seen from the number of smartphone users that my country's mobile Internet is huge and developing rapidly. However, with the rapid development of the mobile Internet, attacks and frauds targeting mobile networks occur from time to time. [0003] Phishing attack is a method of simulating the interface of a normal website to trick users into entering information such as user names and passwords, so as to achieve the purpose of stealing user account information. At present, there are better defense and protection methods for phishing attacks on the PC side, but the ...

AI Technical Summary

Problems solved by technology

However, due to the need for complex image processing operations, this method is not suitable for mobile phones in view of the fact that the performance of mobile phones cannot meet such computing needs well.

Images