System and method for anti-phishing emails based on link domain name and user feedback

Abstract

The invention provides a system and a method for anti-phishing emails based on link domain name and user feedback. The system comprises an email receiving device, an email pre-processing device, an email property judging device, an outputting device and a feedback processing device. The method comprises the following steps: analyzing characteristics of the link domain name in the email, combiningwith a controlled network user feedback strategy, and identifying phishing emails and doubtful phishing emails. The invention has advantages of high identification efficiency, low resource consumption and no error rate. The invention can be configured to email servers, gateway servers and the like that require high real-time performance, protect the controlled network user against cheating by thephishing emails, resist the interference from the spiteful user in the controlled network, and can be widely applied to the application fields of network email filtering management, anti-phishing attack and the like.

Description

(1) Technical field [0001] The invention relates to a network email filtering evaluation technology, in particular to a filtering technology for phishing emails. (2) Background technology [0002] As people rely more and more on the Internet to deal with business, financial and other issues, the number of phishing emails has also increased dramatically, and the forms are diversified. Phishing emails refer to the use of disguised emails to trick recipients into replying to designated recipients with information such as account numbers and passwords or direct recipients to connect to specially crafted webpages. These webpages usually pretend to be the same as real websites to convince log-ins , enter the credit card or bank card number, account name and password, etc. and be stolen. The e-mails will always be in the identity of a management organization, and the content usually involves information such as winning prizes, account numbers, and passwords. In particular, sites ...

AI Technical Summary

Problems solved by technology

The disadvantage of this type of method is that the recognition speed is slow, and the link in the email needs to be analyzed by DNS to obtain the page information where the link is located, and the DNS analysis process increases the processing time, and the preprocessing process such as sensitive feature extraction requires more For reference, a large amount of system resources are required to complete the construction of the page classifier, and it takes a lot of time to identify

Images