Fake Web Address Detection via Visual Confusion Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are vulnerable to phishing attacks due to the difficulty in distinguishing between genuine and fake web addresses, particularly when similar characters such as 'i' and '1' are used, leading to unintended access to fraudulent websites.
Innovation Solution
A method and system that compare destination addresses with known addresses to determine validity, using visual confusion detection and similarity thresholds to identify dishonest transformations, and a computer program product that processes and registers domain names by checking for dishonest transformations, ensuring users access legitimate sites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If domain names use visually similar characters (e.g., 'i' and '1'), then domain name creativity and availability are improved, but user ability to distinguish genuine from fake addresses deteriorates
Solution Approach 1:
The patent introduces an intermediary verification system that compares the domain name being accessed against a database of known legitimate domain names. This intermediary process detects visual confusion cases by analyzing character similarity and alerting users before they are redirected to phishing sites, thus resolving the contradiction between domain name creativity and user ability to distinguish addresses.
2Reliability
If users manually verify domain names to avoid phishing, then security is improved, but user convenience and operation speed deteriorate
Solution Approach 1:
The patent implements a self-service verification system where the browser or security software automatically checks domain names against a database of legitimate sites without requiring user intervention. The system performs automatic comparison and validation, providing security protection while maintaining user convenience by eliminating manual verification steps.
3Measurement precision
If a comprehensive verification system compares all domain names against known addresses, then detection accuracy is improved, but system complexity and processing time worsen
Solution Approach 1:
The patent segments the verification process into multiple stages: first checking against a database of known legitimate domain names, then applying visual confusion detection algorithms only when needed, and finally using similarity threshold comparisons. This segmented approach maintains high detection accuracy while reducing overall system complexity by breaking down the comprehensive verification into manageable, specialized components.
Data Source
AI summary
A destination address is processed to determine if the destination address is a fake web address or hyperlink. The destination address may be compared with a database of known domain names to see if the domain name is legitimate or illegitimate. The designation address may also be compared to other domain names to see if it is an honest or dishonest transformation of the other domain names. Appropriate action may be taken if the designation address is a dishonest transformation of another domain name.