Anti-phishing detection method and system based on insurance company recruitment

Abstract

The invention provides an anti-phishing detection method and system based on recruitment of an insurance company, and aims to solve the problems of flooding of phishing recruitment and false recruitment information, long manual troubleshooting time, low accuracy and high labor cost in the current insurance industry. Internet multi-platform recruitment information is automatically collected, preliminarily screened and then directionally pushed to administrators of all cities through WeChat, and false information is disposed after offline verification and confirmation. According to the invention, the semi-automatic process of recruitment information from collection to disposal is realized, the anti-phishing detection efficiency and accuracy are greatly improved, the manpower consumption of enterprises is reduced, and the brand reputation of insurance companies and the rights and interests of job seekers are effectively protected.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network information security and enterprise human resource management, and particularly relates to a method and system for anti-phishing detection based on insurance company recruitment. BACKGROUND

[0002] In the daily operation of the insurance industry, recruitment is an important work to ensure the enterprise's talent reserve and support business development. With the popularization of the Internet, insurance companies will not only publish recruitment information on official websites and official public accounts, but also publish positions on third-party recruitment platforms to expand the recruitment range and attract more job seekers.

[0003] However, the openness of the Internet also provides opportunities for phishing recruitment and false recruitment. Some unscrupulous people will use the name of insurance companies to publish false job information on various recruitment platforms, using "high salary", "low threshold", "no experience can be hired" as bait to attract job seekers to submit resumes, and even require job seekers to pay "employment deposit", "training fee", or steal job seekers' personal identity information, bank card information, etc., to commit fraud. Such false recruitment not only seriously infringes the legitimate rights and interests of job seekers, but also damages the brand reputation of insurance companies, causes a crisis of public trust in insurance companies, and may even lead to legal disputes.

[0004] To deal with the above problems, insurance companies currently mainly use manual investigation to handle Internet recruitment information: arrange special personnel to visit various recruitment platforms regularly, search for recruitment information containing the company name, and then confirm the information authenticity through internal communication. However, this manual method has obvious defects: Low efficiency: there are many Internet recruitment platforms and information updates quickly, manual investigation cannot cover all platforms, and it takes a long time to check information one by one, often failing to discover false recruitment information in time; Low accuracy: manual judgment is easily affected by subjective factors, and some false information is highly disguised (such as using similar abbreviations to the company name, or imitating official recruitment tactics), making it difficult to quickly identify; High labor cost: long-term arrangement of special personnel for investigation requires a large amount of human resources, increasing the operating cost of the enterprise; Lag in disposal: there is a time difference from the discovery of false information to the reporting and disposal, which may lead to the spread of false information, causing more job seekers to be deceived.

[0005] Although there are a few general tools for network information crawling in the prior art, these tools are not designed in combination with the insurance industry recruitment scene and cannot meet the needs of insurance company phishing detection: first, general tools cannot accurately extract key content in recruitment information (such as contact email and work location), and information may be missed; second, there is a lack of screening rules for the insurance industry, and insurance-related recruitment information cannot be quickly screened out; third, there is no information distribution and verification mechanism combined with enterprise internal management processes, and the crawled information is difficult to efficiently pass to the personnel responsible for verification. SUMMARY

[0006] The purpose of the present application is to solve the problems existing in the prior art and provide a method and system for insurance company recruitment phishing detection.

[0007] To achieve the above purpose, the present application adopts the following technical solution: a method for insurance company recruitment phishing detection, the specific steps of which are as follows: S1: Configure recruitment information acquisition and analysis related parameters; the parameters include target recruitment website analysis rules, insurance industry recruitment keywords, and information acquisition basic fields; S11: The server configures User-Agent and Cookie information for simulating normal access, sets corresponding Xpath analysis templates for different recruitment website page structures, and extracts recruitment information core content; S12: Configure commonly used keywords for insurance industry recruitment, including "insurance broker", "underwriting specialist", "insurance claims", and "life insurance consultant", for preliminary matching of related recruitment information; S13: Determine the recruitment information basic fields to be obtained, including at least job title, recruitment time, work location, and contact email; S2: Automatically acquire and filter Internet recruitment information; S21: Based on the parameters configured in step S1, crawl public recruitment information from each target recruitment website, and filter out information related to the insurance industry through keyword matching; S22: Set a time threshold to filter out expired recruitment information published more than the threshold, which can be selected within 7-60 days; S23: According to the work location in the recruitment information, classify the filtered valid information into the information set of the corresponding city; S3: Configure WeChat push rules and perform message push; S31: Create a WeChat public account for recruitment information push, configure push frequency and message templates, and templates include job title, recruitment time, work location, and contact email; S32: The server checks the information to be pushed, and if there is repeated content with historical push, it is directly filtered; S33: According to the pre-set WeChat ID list of each city administrator, the classified recruitment information is pushed to the corresponding administrator; if there is no new information at this time, the prompt "no new recruitment information needs to be verified" is pushed; S4: Verify the authenticity of the recruitment information offline and dispose the false information; S41: After receiving the information pushed by WeChat, the administrator of each city contacts the corresponding department of the local insurance company to confirm whether the recruitment information is officially published by the company; S42: If it is verified as false recruitment information, the administrator records the information details, including the publishing platform, information content, contact email, and reports to the security department of the insurance company headquarters; S43: After receiving the reported information, the security department of the headquarters contacts the recruitment platform to delete the false information, and publishes a warning announcement if necessary.

[0008] Preferably, in step S11, the configuration mode of the Xpath parsing template is: viewing the target recruitment website page source code through the browser, positioning the HTML tag path corresponding to the core fields of the post name and recruitment time, setting the path as the Xpath parsing rule to ensure accurate extraction of the corresponding content.

[0009] Preferably, in step S32, the way to judge whether the information is repeated is: comparing the post name, work location and contact email of the information to be pushed with the information pushed in the past 30 days, if all three are identical, it is determined as repeated information.

[0010] Preferably, in step S41, the administrator needs to complete the verification within 48 hours after receiving the information, if it cannot be verified on time due to special circumstances, the reason for the delay and the completion time need to be reported to the security department of the headquarters.

[0011] A system for detecting phishing based on insurance company recruitment, comprising a server information processing module, a WeChat push module, and an information verification and disposal module; The server information processing module includes a parameter configuration unit, an information crawling unit, and an information screening unit; The parameter configuration unit is used to set User-Agent, Cookie, Xpath parsing template, recruitment keywords, information fields and time threshold; The information crawling unit automatically accesses the target recruitment website based on parameter configuration, extracts and stores insurance industry related recruitment information; The information screening unit filters expired information and repeated information, and classifies and organizes valid information by city; The micro message push module comprises a public number management unit, a push configuration unit and a message sending unit; the public number management unit creates and maintains a special public number for recruitment information push, and ensures normal operation of the public number; the push configuration unit sets a push frequency, a message template and a list of city administrator WeChat IDs; and the message sending unit pushes classified recruitment information or a no new information prompt to the administrator; The information verification processing module comprises an information verification unit, a reporting unit and a processing unit. The information verification unit is used by the administrator to record the verification process and results; the reporting unit supports the administrator to upload false information details and submit them to the headquarters; and the processing unit is used by the headquarters security department to check the reported information, initiate platform complaints and warning release operations.

[0012] Preferably, the server information processing module further comprises a log recording unit for storing data such as information crawling time, screening results, push records and verification results, and the log saving time is not less than 6 months, facilitating subsequent query and traceability.

[0013] Preferably, the micro message push module further comprises a message feedback unit; the administrator directly marks the verification result through the message feedback unit on the WeChat end, and the feedback result is synchronized to the server log recording unit in real time.

[0014] Compared with the prior art, the present application has the following advantages: through automatic crawling and screening, the present application replaces manual access to the recruitment platform one by one, and the information acquisition time is shortened from several hours to several tens of minutes; the WeChat targeted push reduces the information transmission time, the administrator can receive the information in real time, and the verification response speed is improved by more than 50%.

[0015] Secondly, the core field of information is accurately extracted through Xpath analysis template, combined with insurance industry keyword screening, irrelevant information interference is reduced; the city classification makes the administrator only process local information, familiar with the local recruitment situation, and the verification accuracy is greatly improved.

[0016] Furthermore, the automatic process reduces the human participation link, does not need to arrange full-time staff to be responsible for information investigation, only needs the part-time work of the city administrator to complete the verification, is suitable for the needs of the insurance company to control the operating cost; at the same time, the system configuration and use process are simple, the administrator does not need to master complex technology, and all operations can be completed through the Web interface and WeChat; without a large amount of hardware investment, small and medium-sized insurance companies can also deploy and use, and the application range is wide. BRIEF DESCRIPTION OF DRAWINGS

[0017] Figure 1 It is a whole process schematic diagram of the present application. DETAILED DESCRIPTION

[0018] For the purpose, structure, features, and functions of the present application, the following embodiments are described in detail.

[0019] Please refer to Figure 1 The present application provides a method for anti-phishing detection based on insurance company recruitment, and the specific steps are as follows: S1: Configure recruitment information acquisition and analysis related parameters; the parameters include target recruitment website analysis rules, insurance industry recruitment keywords, and information acquisition basic fields; S11: The server configures User-Agent and Cookie information to simulate normal access, sets corresponding Xpath analysis templates for different recruitment website page structures, and extracts recruitment information core content; The server needs to configure User-Agent and Cookie information, which are used to simulate the behavior of normal users accessing the recruitment website through the browser, avoiding being recognized as "crawler tool" and intercepted when crawling information; User-Agent can directly copy the default identifier of mainstream browsers; Cookie information can be obtained by copying from the browser "Developer Tools-Application-Cookie" after logging in to the recruitment website, ensuring that the server can normally access the recruitment information page that needs to be logged in to view.

[0020] For the differences in the page structure of different recruitment websites, a dedicated Xpath analysis template needs to be configured for each website; the configuration method is simple, the administrator uses the browser to open the recruitment information list page of the target recruitment website, finds the HTML tag corresponding to the job title, copies the path of the tag as the Xpath rule, and through the rule, the corresponding field content can be accurately extracted, avoiding interference from redundant information.

[0021] S12: Configure commonly used keywords for insurance industry recruitment, including "insurance broker", "underwriting specialist", "insurance claims", "life insurance consultant", for preliminary matching of related recruitment information; The administrator sets the recruitment keywords according to the common recruitment positions of the insurance company, which are used for preliminary screening of information related to the insurance industry. Common keywords include "insurance broker", "insurance agent", "underwriting specialist", "claims specialist", "life insurance consultant", "property insurance customer manager", "insurance operation", etc. The keywords can be added or deleted according to the actual recruitment position type of the company. When crawling information later, the system will automatically match the job titles containing these keywords, filter the recruitment information unrelated to insurance (such as "software engineer", "front desk"), and reduce the number of invalid information.

[0022] S13: Determine the basic fields of recruitment information to be obtained, including at least job title, recruitment time, work location, and contact email; Determine the basic fields of the recruitment information to be retrieved, including at least the job title, recruitment date, work location, and contact email. These fields are crucial for verifying the authenticity of the information: the job title is used to determine if it is a regular job posting for the company; the recruitment date is used to filter out expired information; the work location is used to categorize by city for easy verification by the corresponding regional administrator; and the contact email is used to confirm whether it is an official company email address (not a personal email address). Administrators can add fields such as "Company Name" and "Salary Range" as needed, but the core fields do not need to be excessive to avoid increasing configuration complexity.

[0023] S2: Automated acquisition and filtering of online job postings; S21: Based on the parameters configured in step S1, crawl the public recruitment information of each target recruitment website, and filter out information related to the insurance industry through keyword matching; Based on the parameters configured in S1, the server automatically starts the crawling program: it accesses target recruitment websites (such as Zhaopin, 51job, and BOSS Zhipin), extracts fields such as job title, recruitment time, work location, and contact email by parsing the template using XPath, and then matches the job titles with keywords configured in S12 to filter out information containing insurance industry keywords, which is then stored in the server database. The crawling process requires no manual operation; the system can automatically execute it at a preset period (e.g., 2 AM daily), avoiding the occupation of work time resources.

[0024] S22: Set a time threshold to filter out expired job postings that have been published for longer than the threshold. The time threshold can be selected within the range of 7 to 60 days. Considering that job postings in the insurance industry typically have a certain timeframe (e.g., 1-2 months), there's no need to verify expired information. The system presets a time threshold (default 30 days, manually adjustable by the administrator) to compare the "recruitment time" in the crawled job postings with the current system time. If the time difference exceeds the threshold (e.g., if the job posting was published 60 days ago, the threshold is set to 30 days), it's considered expired and automatically deleted from the database. Only recently published valid information is retained, reducing subsequent verification workload.

[0025] S23: Based on the work location in the job posting, classify the filtered valid information into the information set of the corresponding city; Insurance companies typically have branches in various cities, and their recruitment information is geographically specific. Categorizing by city allows regional administrators to focus on local information, improving the targeting of verification. The system automatically categorizes valid recruitment information into the corresponding city's information set based on the "work location" (e.g., "Chaoyang District, Beijing," "Pudong New Area, Shanghai," "Tianhe District, Guangzhou"), such as "Beijing Recruitment Information Set" and "Shanghai Recruitment Information Set." After categorization, the information is ready for distribution.

[0026] S3: Configure WeChat push rules and execute message push; S31: Create a WeChat official account for pushing recruitment information, configure the push frequency and message template, and the template includes job title, recruitment time, work location and contact email; On the WeChat server side, a dedicated official account for pushing recruitment information is created (e.g., "XX Insurance Recruitment Verification Platform"). The official account registration and enterprise authentication are completed (to ensure the credibility of the pushed information), and the "template message" function is enabled. The administrator configures the push frequency (default is twice a day, at 9 AM and 3 PM, which can be adjusted according to work schedule) and message templates in the official account backend. The template content is fixed and includes the job title, recruitment time, work location, and contact email address. S32: The server checks the information to be pushed and filters it directly if there is content that is the same as the previous push. To avoid duplicate pushes caused by the same job posting being published on different platforms (such as simultaneously posting on Zhaopin.com and 51job.com), the system compares the job posting to be pushed with the job title, work location, and contact email address of the postings already pushed within the past 30 days. If all three are completely identical, the posting is considered a duplicate and is filtered out, with only one posting retained, thus avoiding repeated verification by the administrator.

[0027] S33: Based on the pre-set list of WeChat IDs of administrators in various cities, push categorized recruitment information to the corresponding administrators; if there is no new information in the current period, push the message "No new recruitment information available for verification". The system pushes recruitment information from the corresponding city's recruitment information set to the administrator's WeChat account based on a pre-set list of WeChat IDs for city administrators (administrators provide their WeChat IDs in advance and enter them into the system). For example, the Beijing city administrator receives all information from the "Beijing City Recruitment Information Set," and the Shanghai city administrator receives information from the "Shanghai City Recruitment Information Set." If a city has no new valid recruitment information for the current period, the system will send a notification to the city administrator stating "No new recruitment information available for verification," informing the administrator that there is no need to wait.

[0028] S4: Verify the authenticity of recruitment information offline and deal with false information; S41: After receiving the information pushed by WeChat, the local city administrators contact the corresponding department of the local insurance company to confirm whether the recruitment information is officially released by the company. After receiving the push notification via WeChat, local administrators must contact the corresponding department of their local insurance company within 48 hours (this can be adjusted based on actual circumstances) to verify the information's authenticity: if it's a branch recruitment, contact the branch's human resources department; if it's a headquarters assignment, contact the headquarters' human resources department. Key verification points include: whether there is a recruitment plan for the position, whether the contact email is the company's official email address, and whether the work location is the company's office address. Administrators record the verification results ("Information Authentic," "Fake Recruitment," "Pending Further Verification"). If "Pending Further Verification," additional verification and updates must be completed within 24 hours.

[0029] S42: If the recruitment information is verified to be false, the administrator will record the information details, including the publishing platform, information content, and contact email, and report it to the security department of the insurance company's headquarters; If the verification result is "fake recruitment," the administrator clicks the "Report False Information" button in the WeChat push notification, fills in the information details (including the name of the publishing platform, the link to the information, and the reason for the false information, such as "impersonating our company name, and the contact email is a personal QQ email address"), and submits it to the security department of the insurance company's headquarters. The reporting process requires no additional documents; it can be completed directly online, making it very convenient.

[0030] S43: After receiving the reported information, the headquarters security department will contact the recruitment platform to delete the false information and issue a warning notice if necessary. Upon receiving the reported information, the headquarters security department will take action within one business day: contact the recruitment platform's customer service, provide company verification materials (such as business licenses and official statements), request the removal of false information and the suspension of the posting account; if the false information has already caused job seekers to be deceived, the department can cooperate with the local public security authorities to intervene in the investigation; at the same time, the department will publish a "Notice on Beware of False Recruitment Information" on the company's official website and official WeChat account, publicizing the characteristics of false information and official recruitment channels, reminding job seekers to verify information, and reducing adverse effects.

[0031] Preferably, in step S11, the XPath parsing template is configured as follows: by viewing the source code of the target recruitment website page through a browser, locating the HTML tag path corresponding to the core fields of job title and recruitment time, and setting this path as the XPath parsing rule to ensure that the corresponding content can be accurately extracted.

[0032] Preferably, in step S32, the method for determining whether the information is duplicated is: compare the job title, work location, and contact email of the information to be pushed with the information pushed in the past 30 days. If the three are completely consistent, it is determined to be duplicate information.

[0033] Preferably, in step S41, the administrator must complete the verification within 48 hours of receiving the information. If verification cannot be completed on time due to special circumstances, the administrator must report the reasons for the delay and the completion time to the headquarters security department.

[0034] A system for detecting phishing in insurance company recruitment includes a server-side information processing module, a WeChat push module, and an information verification and handling module. The server-side information processing module includes a parameter configuration unit, an information crawling unit, and an information filtering unit. The parameter configuration unit is used to set User-Agent, Cookie, XPath parsing template, recruitment keywords, information fields, and time thresholds. The unit provides a visual configuration interface where administrators can input User-Agent and Cookie information, upload XPath parsing templates (supporting copy-pasting XPath rules), add or delete recruitment keywords, select the information fields to be retrieved, and set time thresholds. After configuration, clicking "Save" takes effect immediately without requiring a system restart.

[0035] The information crawling unit automatically accesses target recruitment websites based on parameter configuration, extracts and stores recruitment information related to the insurance industry. Based on the rules of the parameter configuration unit, it automatically executes crawling tasks, supporting both manual triggering (administrator clicks "Crawl Now") and scheduled triggering (preset daily fixed-time crawling). Progress is displayed during the crawling process (e.g., "Crawled 100 pieces of information from Zhaopin.com, 85 successfully extracted"). After crawling is complete, the insurance industry-related information is stored in the database.

[0036] The information filtering unit filters out expired and duplicate information, and sorts out the valid information by city. It automatically performs expired and duplicate information filtering, displays the filtering results (such as "A total of 120 pieces of information were crawled this time, 15 expired pieces of information and 10 duplicate pieces of information were filtered out, and 95 pieces of valid information were obtained"), and transmits the information to the WeChat push module after being categorized by city, while recording the filtering log.

[0037] The WeChat push module includes an official account management unit, a push configuration unit, and a message sending unit. The official account management unit creates and maintains a dedicated official account for pushing recruitment information, ensuring the normal operation of the official account. The push configuration unit sets the push frequency, message template, and a list of WeChat IDs of administrators in various cities. The message sending unit pushes categorized recruitment information or no new information notifications to administrators. The information verification and processing module includes an information verification unit, a reporting unit, and a processing unit; The information verification unit allows administrators to record the verification process and results; the reporting unit allows administrators to upload details of false information and submit them to headquarters; the handling unit allows the headquarters security department to view the reported information and initiate platform complaints and warnings.

[0038] Preferably, the server-side information processing module further includes a log recording unit for storing data on information crawling time, filtering results, push records, and verification results. The logs are kept for no less than 6 months to facilitate subsequent querying and tracing.

[0039] Preferably, the WeChat push module further includes a message feedback unit; the administrator can directly mark the verification result on the WeChat terminal through the message feedback unit, and the feedback result is synchronized to the server-side log recording unit in real time.

[0040] Specific implementation: The process of recruiting anti-phishing detection personnel for a medium-sized insurance company.

[0041] This insurance company has branches in several provinces and cities across the country. Previously, it relied on manual screening of recruitment information, requiring three full-time staff members each month, but it still couldn't detect false information in a timely manner. Since March 2024, it has adopted the method and system of this invention, and the implementation process is as follows: Select a cloud server (Alibaba Cloud ECS, configured with 2 cores and 4GB of memory to meet the needs of small and medium-sized enterprises) to deploy the server-side information processing module. The web interface is developed using simple HTML + JavaScript, and the administrator logs in with an account and password. The WeChat official account is registered as "XX Insurance Recruitment Security Platform", and the enterprise authentication is completed and the template message function is enabled. Local administrators provide their WeChat IDs, enter them into the system, and complete the binding.

[0042] S11: Configure User-Agent to copy the cookie information from the browser after logging into Zhaopin and 51job, and enter it into the server; configure XPath parsing templates for the three mainstream platforms: Zhaopin, 51job, and BOSS Zhipin. For example, the XPath for the job title on Zhaopin is " / / div [@class='job - title'] / text ()", the XPath for the recruitment time is " / / span [@class='update - time'] / text ()", and the XPath for the contact email is " / / div [@class='contact - email'] / text ()".

[0043] S12: Configure recruitment keywords as "insurance broker, insurance agent, underwriter, claims specialist, life insurance consultant, property insurance account manager, insurance operations, insurance trainer".

[0044] S13: Define the information fields as job title, recruitment time, work location, and contact email, and set the time threshold to 30 days.

[0045] S21: The system is set to automatically crawl information from 3 recruitment platforms at 2:00 AM every day. On March 10, a total of 180 pieces of information were crawled, and 120 pieces of information related to the insurance industry were filtered out by keyword matching and stored in the database.

[0046] S22: The system compares the recruitment time with the current time (2024-03-10), filters out 25 expired information that was published more than 30 days ago, and leaves 95 valid information.

[0047] S23: 95 pieces of information were categorized into 15 cities based on work location, including 8 from Beijing, 10 from Shanghai, 7 from Guangzhou, 9 from Shenzhen, and 61 from other cities.

[0048] S31: Configure the official WeChat account to push a message once daily at 9:00 AM. The message template is:

Recruitment Information Verification Notice

[0049] S33: At 9:00 AM on March 10th, the system pushed relevant information to administrators in 15 cities. The Beijing administrator received 8 messages, the Shanghai administrator received 10 messages, the Guangzhou administrator received 7 messages, and so on. There was no new information in 2 cities, and the administrators received the message "No new recruitment information available, needs to be verified". The success rate of all information pushes was 100%.

[0050] S41: As of 9:00 AM on March 12 (within 48 hours), all administrators have completed verification and provided the following feedback: 75 messages were "true", 10 messages were "false", and 2 messages were "pending further verification". Before 9:00 AM on March 13, the feedback for the 2 messages that were "pending further verification" was changed to "true".

[0051] S42: Administrators who submit 10 false information reports via WeChat. For example, a Shanghai administrator reports a post on BOSS Zhipin with the job title "Shanghai High-Paying Insurance Agent" and the contact email "123456@qq.com". The false reason is "misusing our company name. Our Shanghai branch has no recruitment plan for this position. The contact email is a personal QQ email address."

[0052] S43: The headquarters security department received the reported information on March 13 and completed the handling on March 14: contacted 3 recruitment platforms to delete 10 false information posts and banned 5 posting accounts; on March 15, the company issued an "Announcement on Beware of False Recruitment Information" on the company's official website, announcing the characteristics of 10 false information posts and official recruitment channels (official website recruitment section, official WeChat account), reminding job seekers to pay attention to verification.

[0053] The present invention has been described in the above-described embodiments; however, these embodiments are merely examples for implementing the present invention. It must be noted that the disclosed embodiments do not limit the scope of the present invention. Conversely, any modifications and refinements made without departing from the spirit and scope of the present invention are within the scope of patent protection of the present invention.

Claims

1. A method for phishing detection in insurance company recruitment, characterized in that: The specific steps of the method are as follows: S1: Configure parameters related to recruitment information acquisition and parsing; the parameters include parsing rules for target recruitment websites, recruitment keywords for the insurance industry, and basic fields for information acquisition. S11: Configure the server to simulate normal access User-Agent and Cookie information, and set corresponding XPath parsing templates for different recruitment websites' page structures to extract the core content of recruitment information; S12: Configure commonly used keywords for insurance industry recruitment, including "insurance broker", "underwriting specialist", "insurance claims" and "life insurance consultant", to initially match relevant recruitment information; S13: Determine the basic fields of the recruitment information to be obtained, including at least the job title, recruitment period, work location, and contact email address; S2: Automated acquisition and filtering of online job postings; S21: Based on the parameters configured in step S1, crawl the public recruitment information of each target recruitment website, and filter out information related to the insurance industry through keyword matching; S22: Set a time threshold to filter out expired job postings that have been published for longer than the threshold. The time threshold can be selected within the range of 7 to 60 days. S23: Based on the work location in the job posting, classify the filtered valid information into the information set of the corresponding city; S3: Configure WeChat push rules and execute message push; S31: Create a WeChat official account for pushing recruitment information, configure the push frequency and message template, and the template includes job title, recruitment time, work location and contact email; S32: The server checks the information to be pushed and filters it directly if there is content that is the same as the previous push. S33: Based on the pre-set list of WeChat IDs of administrators in various cities, push categorized recruitment information to the corresponding administrators; if there is no new information in the current period, push the message "No new recruitment information available, needs to be verified"; S4: Verify the authenticity of recruitment information offline and deal with false information; S41: After receiving the information pushed by WeChat, the local city administrators contact the corresponding department of the local insurance company to confirm whether the recruitment information is officially released by the company. S42: If the recruitment information is verified to be false, the administrator will record the information details, including the publishing platform, information content, and contact email, and report it to the security department of the insurance company's headquarters; S43: After receiving the reported information, the headquarters security department will contact the recruitment platform to delete the false information and, if necessary, issue a warning notice.

2. The method for anti-phishing detection based on insurance company recruitment as described in claim 1, characterized in that: In step S11, the XPath parsing template is configured as follows: view the source code of the target recruitment website page through a browser, locate the HTML tag path corresponding to the core fields of job name and recruitment time, and set the path as the XPath parsing rule to ensure that the corresponding content can be accurately extracted.

3. The method for anti-phishing detection based on insurance company recruitment as described in claim 1, characterized in that: In step S32, the method for determining whether information is duplicated is as follows: compare the job title, work location, and contact email of the information to be pushed with the information pushed in the past 30 days. If the three are completely consistent, it is determined to be duplicate information.

4. The method for anti-phishing detection based on insurance company recruitment as described in claim 1, characterized in that: In step S41, the administrator must complete the verification within 48 hours of receiving the information. If verification cannot be completed on time due to special circumstances, the administrator must report the reason for the delay and the completion time to the headquarters security department.

5. A system for detecting phishing in insurance company recruitment, characterized in that, This includes a server-side information processing module, a WeChat push module, and an information verification and handling module; The server-side information processing module includes a parameter configuration unit, an information crawling unit, and an information filtering unit. The parameter configuration unit is used to set User-Agent, Cookie, XPath parsing template, recruitment keywords, information fields, and time thresholds; The information crawling unit automatically accesses the target recruitment website based on parameter configuration, extracts and stores recruitment information related to the insurance industry; The information filtering unit filters out expired and duplicate information, and sorts out valid information by city / prefecture. The WeChat push module includes an official account management unit, a push configuration unit, and a message sending unit. The official account management unit creates and maintains a dedicated official account for pushing recruitment information, ensuring the normal operation of the official account. The push configuration unit sets the push frequency, message template, and a list of WeChat IDs of administrators in various cities. The message sending unit pushes categorized recruitment information or no new information notifications to administrators. The information verification and processing module includes an information verification unit, a reporting unit, and a processing unit; The Fox Information Verification Unit allows administrators to record the verification process and results; the Reporting Unit allows administrators to upload details of false information and submit them to headquarters; the Handling Unit allows the headquarters security department to view the reported information and initiate platform complaints and warnings.

6. The system for anti-phishing detection based on insurance company recruitment as described in claim 5, characterized in that: The server-side information processing module also includes a log recording unit, which stores data on information crawling time, filtering results, push records, and verification results. The logs are kept for no less than 6 months to facilitate subsequent querying and tracing.

7. A system for anti-phishing detection based on insurance company recruitment as described in claim 5, characterized in that: The WeChat push module also includes a message feedback unit; the administrator can directly mark the verification result on the WeChat side through the message feedback unit, and the feedback result is synchronized to the server-side log recording unit in real time.

Images