A method for discriminating phishing websites based on threat intelligence

A website and intelligence technology, applied in the field of network security, can solve the problems of high false alarm rate and false negative rate, and achieve the effect of improving accuracy, improving timeliness, and reducing the impact of bad information

Inactive Publication Date: 2019-03-26
HANGZHOU ANHENG INFORMATION TECH CO LTD
View PDF5 Cites 14 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Therefore, this method has a high rate

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method for discriminating phishing websites based on threat intelligence

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0041] The specific implementation manners of the present invention will be described in detail below in conjunction with the accompanying drawings.

[0042] The method for discriminating counterfeit websites based on threat intelligence in the present invention comprises the following steps:

[0043] (1) Compare the similarity between the domain name information database in the threat intelligence database and the content in the webpage database;

[0044] (1.1) For the home page of the website in the domain name information database The content in the website is analyzed, and the semantic analysis algorithm is used for identification; the website group whose similarity is higher than the preset threshold is extracted for the next step of analysis; or,

[0045] (1.2) Specify the target site and extract the site's The content in the domain name information database is used to find website groups whose similarity is higher than the preset threshold compared with it for t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a network security technology, aiming at providing a method for discriminating phishing websites based on threat information. Includes such steps as comparing the similarity between the domain name information base in threat information base and the content in web page base; Analyzing the filing subjects of each site in the website group, and matching the filing units of ICP; If no abnormal site is detected, further match the registrant information and analyze the site deployment address IP; Analyzing page characteristics; After judging the degree of suspicion of the phishing site, labeling the information of the site is as phishing site in the threat intelligence database. The invention can be effectively applied to government, education, institution and other industries for detecting and discovering counterfeit stations. Discovering counterfeit websites in time, reduce the influence of bad information, truncate the promotion of underground industry chain, andenhance the credibility of public units.

Description

technical field [0001] The invention relates to network security technology, in particular to a method for discriminating counterfeit websites based on threat information. Background technique [0002] Counterfeit websites are mainly due to a method adopted by hacker organizations for economic benefits. By counterfeiting seemingly completely normal and compliant site pages, they actually implant a large number of third-party links and content in the website, most of which involve gambling, pornography, Games and other improper profit-making businesses. There are a large number of counterfeit sites in the domestic Internet website scene. These sites actually spread underground gray industry promotion on the page by counterfeiting the sites of units with high credibility (often government units, public institutions, educational institutions, etc.). In order to avoid the discovery of the testing agency, it can lurk for a long time to seek benefits. If this problem is not reso...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F16/958G06F16/955G06F21/55H04L29/06
CPCG06F21/554G06F2221/2119H04L63/10
Inventor 金丽慧范渊
Owner HANGZHOU ANHENG INFORMATION TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products