Hierarchical Malicious Website Filtering via Local Server Lists
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for identifying malicious websites are inefficient, leading to slow identification processes and increased network traffic, which is particularly problematic for mobile devices with restricted network access.
Innovation Solution
A hierarchical approach using both local and server website-filtering lists, where the local list filters known websites and the server list filters unknown ones, reducing the need for network connections and improving speed and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If a website database is used to collect known malicious websites and perform identification via network server, then identification accuracy is improved, but identification speed deteriorates and network traffic increases
Solution Approach 1:
The patent segments the website filtering function into two parts: a local filtering module that handles quick local checks against a database of known malicious websites, and a server-based filtering module that handles complex identification tasks. This segmentation allows common cases to be resolved quickly locally while maintaining accuracy for unknown threats through server-based analysis.
Solution Approach 2:
The patent implements preliminary action by pre-loading a database of known malicious websites into the local filtering module before runtime. This allows the system to perform rapid local identification without needing to query the server for every website, significantly improving identification speed for known threats while maintaining accuracy.
2Measurement precision
If network server performs identification calculation for every target website, then identification accuracy is improved, but network traffic increases and access time deteriorates
Solution Approach 1:
The patent divides the identification process into local and server-based segments. The local filtering module handles identification for known malicious websites immediately without network access, while only unknown websites trigger server-based identification. This reduces access time for the majority of cases while maintaining accuracy through server verification when needed.
Solution Approach 2:
The local filtering module performs self-service by autonomously identifying and blocking known malicious websites using the pre-loaded database, without requiring network server intervention. This self-service capability dramatically reduces access time for common cases while the server remains available for complex identification tasks.
3Measurement precision
If network server performs identification calculation for every target website, then identification accuracy is improved, but network traffic increases
Solution Approach 1:
The patent extracts the identification of known malicious websites from the network server and places it in the local filtering module. This extraction eliminates unnecessary network traffic for common cases while the server continues to provide identification services for unknown websites, reducing overall network traffic while maintaining identification accuracy.
Solution Approach 2:
The local filtering module handles identification tasks independently for known malicious websites, making the system self-sufficient for common cases. This reduces dependency on network server queries, thereby minimizing network traffic and energy consumption while the server remains available for complex identification tasks that require its processing power.
Data Source
AI summary
The present disclosure discloses a method of identifying malicious websites. The method includes: filtering a target website using a local website-filtering list; if the target website is not on the local website-filtering list, filtering the target website using a server website-filtering list. The present disclosure also discloses, based on the above-described method, a system for identifying malicious websites. By using the disclosed malicious website identifying method and system, the number of times needed to access a network to identify malicious websites can be reduced effectively. That is, the number of times that the identification calculation is performed by a network server can be reduced and, thus, increasing the speed of the identification process and reducing network traffic. As a result, the efficiency of the malicious website identifying process can be improved.