Website domain name similarity detection method and device

Abstract

The invention discloses a website domain name similarity detection method and device, and relates to the field of internet security. The method comprises the following steps: matching a to-be-detected website domain name character string with a target website domain name character string; obtaining a plurality of public substrings between the to-be-detected website domain name character string and the target website domain name character string, wherein each public substring comprises one or more characters, every two adjacent public substrings are separated by at least one character, and the at least one character does not belong to any public substring; and determining the similarity between the to-be-detected website domain name and the target website domain name according to the ratio of the sum of the number of the characters in the plurality of common substrings to the number of the characters in the target website domain name character string. According to the method an device, the website domain name similarity calculation result is optimized, so that the similarity calculation result is more accurate.

Description

technical field [0001] The present disclosure relates to the field of Internet security, in particular to a method and device for detecting similarity of website domain names. Background technique [0002] There are some malicious webpages on the Internet. By embedding strings identical or similar to other people’s domain names in URLs (Uniform Resource Locators, Uniform Resource Locators), they confuse and imitate other people’s domain names, thereby achieving the purpose of phishing fraud. The similarity between the counterfeit domain name and the counterfeit domain name can be calculated by editing distance algorithms such as Jaro, so as to find out those who attempt to counterfeit. However, this type of algorithm has a large amount of calculation, and when faced with a large number of similarity comparisons of domain names to be tested, the efficiency is low. [0003] In related technologies, the similarity between domain names is calculated by using the longest common ...

AI Technical Summary

Problems solved by technology

However, the longest common substring method can only strictly match the substring parts that are exactly the same between the two, and cannot achieve the longest match in the actual sense for such "editing" situations as partial modification and replacement, addition of characters, and deletion of characters.

Images