Method and device for fraud website identification and remote trojan evidence collection

Abstract

The invention provides a method and device for fraud website identification and remote trojan evidence collection. A plurality of to-be-identified websites are automatically found on the basis of fraud keywords, and webpage information crawling is carried out on each to-be-identified website; the webpage information which is taken out from each to-be-recognized website is matched with a maliciousfeature, and the successfully matched to-be-identified website is judged to be a fraud website; the feature of the fraud website are analyzed according to the webpage information contained in each fraud website, and the feature is matched with an evidence collecting program template stored in a feature library, so as to obtain an evidence collecting program template matched with each fraud website; and the evidence collecting program template automatically acquires the website background information of the fraud website and returns the website background information to a monitoring station. The method and the device provided by the invention are used for carrying out identification and fraud relevant information evidence collection on the fraud websites, thus fighting against fraud behaviors.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a method and device for identifying fraudulent websites and remote Trojan horse forensics. Background technique [0002] Fraudsters set up various phishing websites, such as fake public security websites, fake bank websites, fake winning information websites, and so on. It is sent to the people through the Internet, text messages, etc. to defraud the people. Due to the sophisticated methods of fraud, the masses are easily deceived, and often their entire savings are defrauded. The existing domestic evidence collection methods are all localized evidence collection. Before obtaining evidence, you need to obtain the server of the criminal. However, the server used by the criminal is often located abroad and cannot be obtained directly, which brings great resistance to the case. Therefore, the public security organs need to A set of systems remotely helps f...

AI Technical Summary

Problems solved by technology

Due to the sophisticated methods of fraud, the masses are easily deceived, and often all their savings are defrauded

The existing domestic evidence collection methods are all localized evidence collection. Before obtaining evidence, you need to obtain the server of the criminal. However, the server used by the criminal is often located abroad and cannot be obtained directly, which brings great resistance to the case. Therefore, the public security organs need to A set of systems to remotely help combat various fake websites, obtain information about people who commit fraud, and a forensics system that fraudsters have defrauded.

Images