Method and system for collecting phishing websites based on payment

Abstract

The invention belongs to the technical field of computer defense, and particularly discloses a method and system for collecting phishing websites based on payment. The method comprises the following steps: judging the security attribute of a user currently accessed website according to existed trusted website database and phishing website database, and recording the web site of the website if the website is unknown; monitoring whether a web page of the current website skips; if the current website skips from the first web page to the second web page, judging whether the web page is a payment page according to the web page content of the second web page; if the web page is the payment page, adding the web site to a suspicious website to be tested database for further confirmation, and if the website is a phishing website, updating the web site to a phishing website database; if the web page is not the payment page, updating a corresponding web site of the second web page to the web site of the current website, and returning to step one for cycle operation. The system comprises a website attribute judge module, a skip monitoring module, a payment page judge module, a collecting updating module and a cycle execution module which are corresponding to the method. Through the adoption of the method or the system, newly appeared phishing websites can be more timely and accurately collected.

Description

technical field [0001] The invention belongs to the technical field of computer defense, and in particular relates to a method and system for collecting phishing websites based on payment. Background technique [0002] Phishing website is a kind of network fraud, which means criminals use various methods to counterfeit the URL address and page content of the real website, or use the loopholes in the real website server program to insert dangerous HTML codes into some webpages of the site, so as to This will seriously affect the development of online financial services and e-commerce, endanger the public interest, and affect the fraudulent bank account. Public confidence in using the Internet. [0003] In order to prevent the harm of phishing websites, there are two current ideas: [0004] 1. Use a method or device to check phishing websites, such as a detection method and device for phishing websites in Chinese Patent No. 200910106659, a method and device for identifying p...

AI Technical Summary

Problems solved by technology

These methods or devices may have certain effects in the initial stage, but as phishing website creators become familiar with and understand the detection rules, the new phishing websites they create can easily pass their detection. The detection rate of phishing websites will gradually decrease, gradually failing to prevent them

[0005] 2. Establish a phishing website database. When a phishing website is found, add the phishing website to the database, and check whether the website is a phishing website through the database. This method has a high detection rate and accuracy, but a difficulty of this method is , timely collection of phishing websites

The random method will do a lot of useless work if it is not targeted; according to the first rule to judge the collection, there will be the same problem, and the detection rate of phishing websites will gradually decrease

Images