Real-time detection method and system of phishing website

Abstract

The invention relates to a real-time detection method and system of a phishing website. The method comprises the following steps of: obtaining the URL (uniform resource locator) address of the current website; detecting the URL address of the website by use of a white list and a black list; extracting the URL features of the website URL not in the white list and the black list, and performing pretreatment; detecting the URL features after the pretreatment by a Bayesian method, and judging whether the website is a phishing website; if the website can not be clearly determined, determining the website to be a suspicious website; extracting the web page content of the suspicious website, and performing pretreatment; and detecting the page features after the pretreatment by a least square support vector machine method, and judging whether the website is a phishing website. The system consists of a system server and a system client, wherein the system server comprises a white list and black list module and the like; and the system client comprises a URL fingerprint list and the like. Compared with the prior art, the method and system provided by the invention improve the detection rate and the accuracy.

Description

technical field [0001] The invention belongs to the field of Internet technology and network security technology, and in particular relates to a method and system for real-time detection of phishing websites. Background technique [0002] In recent years, the Internet has developed vigorously in China, but more and more serious security problems have attracted people's attention. Among them, phishing websites are the representative of network fraud. Phishing website is a fraudulent way of online identity forgery. It often pretends to be a legitimate website, uses social engineering and technical disguise to deceive users' trust, and steals sensitive information such as users' personal identity data and financial account numbers. The detection of phishing websites has become one of the hottest topics in the field of network security. [0003] At present, related researches include: Justin MK, Basnet SM, etc. propose to use the detection method of online recognition of Unifor...

AI Technical Summary

Problems solved by technology

PhishTank has established a blacklist of highly credible phishing website URLs through user reporting and manual review, but it cannot detect phishing websites that are not in the blacklist, and updating the blacklist requires manual checking, which has a certain lag

Some Internet vendors have launched a series of browser auxiliary tools, for example: eBay provides corresponding browser plug-ins; Google has launched a general plug-in that can identify fraudulent web pages, but these auxiliary plug-ins are not effective in detecting various phishing websites. satisfactory

Images