Anti-phishing method, device and system based on gateway

Abstract

The invention discloses an anti-phishing method, device and system based on a gateway, and relates to the technical field of network security. The method comprises the following steps: acquiring a user side access request, wherein the access request comprises accessed domain name information; judging whether a website corresponding to the domain name has a phishing website risk or not through a domain name processing module in the gateway equipment, judging whether the user has set an anti-phishing friend group or not when the phishing website risk exists, and sending the accessed domain name information to the anti-phishing friend group for evaluation when the user has set the anti-phishing friend group; if not, acquiring a preset anti-phishing associated contact person and establishing an anti-phishing friend group, and sending the accessed domain name information to the anti-phishing friend group for evaluation; and obtaining an evaluation result of the anti-phishing friend group and sending the evaluation result to the user. According to the method, the detection reliability of the phishing website is improved, and the detection and confirmation of the suspected phishing website can be more effectively completed.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a gateway-based anti-phishing method, device and system. Background technique [0002] While the Internet greatly facilitates people's lives, it also brings some unsafe factors to people. For example, the existence of some phishing websites endangers the safety of people's property and private information. Phishing (also known as phishing or phishing attack) is to send a large number of fraudulent spam claiming to come from banks or other well-known institutions, with the intention of luring recipients to give sensitive information (such as user name, password, account number, ID, ATM PIN code or credit card details). The most typical phishing attack lures the recipient to a phishing website that is carefully designed to be very similar to the target organization's website, and lures the victim to act according to his intention to obtain the sensitive personal informati...

AI Technical Summary

Problems solved by technology

However, since the blacklist technology is based on the phishing sites that have been found to record, the instant setting of the dynamic update mechanism also has a certain lag, and the update of the virus list of the virus gateway often has timeliness problems, and it is difficult to achieve the expected protection effect

At the same time, the development of Internet financial technology has also brought new changes to phishing websites, which are often more confusing and bring great challenges to traditional detection methods

Images