Phishing Detection via Microblog Feature Credibility Analysis

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users cannot determine whether a URL in a microblog post is a phishing website, posing a risk to their privacy and security.

Innovation Solution

A method and system that acquire information from microblog posts, extract features, calculate the credibility of URLs, and determine if they are phishing sites using an acquisition module, analysis module, calculation module, and determining module.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If users access websites through microblog URLs, then information acquisition efficiency is improved, but security risk increases due to inability to verify URL credibility

Engineering Contradiction:

Improveinformation acquisition efficiencyVSAvoidURL credibility verification

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs preliminary credibility assessment of URLs before users access them by analyzing microblog post features, historical data, and website characteristics in advance. This allows security verification to be completed proactively rather than reactively, maintaining both efficiency and security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The invention introduces an intermediary credibility assessment system that mediates between users and URLs. This intermediary analyzes multiple features including microblog post characteristics, website historical data, and URL patterns to provide credibility verification without requiring users to directly examine suspicious URLs.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Measurement precision

If traditional phishing detection methods are used, then detection accuracy is improved, but user convenience deteriorates due to lack of integration with social media platforms

Engineering Contradiction:

Improvephishing detection accuracyVSAvoiduser convenience

Core Design Contradiction:

Measurement precisionVSEase of operation

Solution Approach 1:

The system is designed with multi-functionality to serve both traditional website access and social media integration. It can detect phishing URLs through multiple channels including direct URL input, microblog post analysis, and browser extensions, making it universally applicable while maintaining high detection accuracy.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system provides self-service phishing detection by automatically analyzing URLs from microblog posts without requiring manual user intervention. Users simply need to share or view posts, and the system autonomously performs credibility assessment, maintaining convenience while ensuring security.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS9210189B2Method, system and client terminal for detection of phishing websites

Publication Date: 2015.12.08 TENCENT TECHNOLOGY (SHENZHEN) CO LTD

AI summary

One aspect of the present invention relates to a method for detecting a phishing website. The method includes acquiring information related to a microblog post containing a uniform resource locator (URL) of a website; analyzing the information related to the microblog post to extract features of the microblog post; calculating credibility of the URL of the website contained in the microblog post according to the extracted features of the microblog post; and determining according to the credibility of the URL of the website whether the URL of the website is a URL of a phishing website.