The invention discloses a
phishing page identification method based on
ensemble learning and active learning. The method comprises the following steps: collecting a network page and
processing the network page into an initial
data set; clustering the initial
data set to construct a cluster set; training a single-class width learning
system for clusters in the cluster set, and allocating weights to construct a first integrated learning model; a buffer area is set to temporarily store unrecognizable pages, types are recognized after clustering, then a single-class width learning
system is trained to be added into the first
ensemble learning model, and a second
ensemble learning model is formed; designing a
weight adjustment mechanism to adapt to the change of the
phishing page; identifying the page by using a second integrated learning model, and if the page fails, sending the page to a buffer area; and if successful, calculating a
confidence score, and selecting the data tag with the highest
score to determine whether the page is a
phishing page. According to the method, the participation of professionals in a phishing page identification process can be reduced, an excellent identification success rate is kept, and an
effective solution is provided for the field of
network security.