Method and device for preventing phishing attacks

Abstract

The embodiment of the invention provides a method and device for preventing phishing attacks. The method comprises the following steps: receiving login information and client-side identifications sent by a client-side; judging whether the client-side is recorded in a black list in accordance with the client-side identifications; when the client-side is recorded in the black list, blocking the client-side to log in; when the client-side is not recorded in the black list, judging whether the login information belongs to bait information, wherein the bait information is used for interfering login information of a phishing attack client-side to log in; when the login information does not belong to the bait information, allowing the client-side to log in; and when the login information belongs to the bait information, recording the client-side to the black list and blocking the client-side to log in, thus reaching the purpose of preventing the phishing attacks, and reducing resource loss and processing time at the same time.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for preventing phishing attacks. Background technique [0002] With the rapid development of Internet technology and the increasing frequency of network transactions, phishing attacks are also showing an explosive upward trend. This year, phishing attacks have attracted the close attention of major e-commerce organizations, banks, security vendors, etc., and some phishing attack protection, monitoring solutions, and corresponding products have emerged. At present, the main way to prevent phishing websites is through the browser of the client. effective blocking. [0003] How to effectively block phishing attacks belongs to the problem that anti-phishing technology needs to solve. At present, the commonly used method of blocking phishing attacks is the ISP (Internet Service Provider, Internet Service Provider) shutdown scheme. The main process is: the detected phishi...

AI Technical Summary

Problems solved by technology

For example: there are 2,000 pairs of users and passwords in the database. Through the "diluted" service plan, only 2 accounts and passwords are true, and it is difficult for phishers to extract the real account and password.

[0004] The inventor found that the method for preventing phishing websites in the prior art, by letting the ISP close the website, takes a long time and requires a relatively high cost

However, through the "dilution" service plan, in order to achieve the purpose of effectively interfering with data, it is necessary to continuously send false information. This process is time-consuming and resource-consuming, and cannot effectively prevent phishing websites.

Images