Counterfeit domain name detection method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a counterfeit domain name detection method and device, electronic equipment and a storage medium, and relates to the technical field of network security detection. The counterfeit domain name detection method comprises the steps of obtaining a to-be-detected domain name; judging whether the domain name to be detected exists in a counterfeit domain name setor not by using a Bloom filter, wherein the counterfeit domain name set is generated on the basis of a domain name white list according to a counterfeit domain name generation mode; and if the domainname to be detected exists in a counterfeit domain name set, judging that the domain name to be detected is a counterfeit domain name. The embodiment of the invention has the capability of preventinga new counterfeit domain name attack, improves the detection capability, and greatly improves the detection efficiency by using the Bloom filter.

Description

technical field [0001] The invention relates to the technical field of network security detection, in particular to a method, device, electronic equipment and storage medium for detecting counterfeit domain names. Background technique [0002] With the popularization of science and technology, network communication technology has penetrated into various fields with an irreplaceable position, and network security problems have become increasingly serious, among which phishing is particularly prominent. [0003] Phishing refers to a network that lures recipient users to a carefully designed phishing website that is very similar to the target organization's website by sending spam emails, etc., and obtains sensitive personal information entered by recipients on this website criminal behavior. Due to the popularity and development of e-commerce and Internet applications, the losses caused by phishing are becoming more and more serious. [0004] Since the domain name is the ent...

AI Technical Summary

Problems solved by technology

[0005] The traditional counterfeit domain name detection method is to find the counterfeit domain name first, and then defend against the counterfeit domain name. Such a solution cannot prevent new counterfeit domain name attacks in advance; moreover, the traditional detection method requires a huge blacklist to communicate with the host. Domain name matching is very low in time efficiency

Images