Method and system for grading detection and prompt of fishing website

Abstract

The invention belongs to the technical field of computer defense and particularly discloses a method and a system for grading detection and prompt of a fishing website. The method includes transmitting uniform resource locator (URL) of a user current visit website to a server end, searching whether the URL is in the preset blacklist database or a white list database, allowing users to visit the current website if the URL in the white list database, preventing the users from visiting the current website and transmitting corresponding risk prompt information if the URL is in the blacklist database, obtaining page content information according to the URL if the URL is not in the blacklist database or the white list database, matching phishing website reference characteristics in a preset phishing website characteristic database with webpage content information and transmitting different risk prompt information according to different matching results. Risk prompt with different grades can be given according to characteristics of different websites, so that using safety of users can be further guaranteed.

Description

technical field [0001] The invention belongs to the technical field of computer defense, and in particular relates to a method and system for hierarchical detection and prompting of phishing websites. Background technique [0002] Phishing website is a kind of network fraud, which means criminals use various methods to counterfeit the URL address and page content of the real website, or use the loopholes in the real website server program to insert dangerous HTML codes into some webpages of the site, so as to This will seriously affect the development of online financial services and e-commerce, endanger the public interest, and affect the fraudulent bank account. Public confidence in using the Internet. [0003] In order to prevent the harm of phishing websites, there are two current ideas: [0004] 1. Use a method or device to check phishing websites, such as a detection method and device for phishing websites in Chinese Patent No. 200910106659, a method and device for i...

AI Technical Summary

Problems solved by technology

Since the characteristics of different types of phishing websites are different and are always changing, the accuracy of this method is not very high, that is, the possibility of false positives is relatively high. Once a phishing website is falsely reported as a safe website, it may Bring a lot of losses to customers, and can't prevent it

[0005] 2. Establish a database of phishing websites. When a phishing website is found, add the phishing website to the database, and use the database to check whether the website is a phishing website. This method has a high accuracy rate, but one difficulty of this method is that phishing websites In the face of a large number of new websites, such prevention methods are powerless

Images