Precise collection method and system based on phishing website spread

Abstract

The invention belongs to the field of computer defense technologies, and particularly discloses a precise collection method and system based on phishing website spread. The precise collection method comprises the following steps: within a preset time range, recording the URLs(Uniform Resource Locators) of all the websites inquired on a server side and the inquiry times; acquiring the URLs of the websites ranking within a preset range according to the inquiry times; detecting whether hidden links exist in the webpages corresponding to the URLs or not, and if hidden links exist, acquiring the URLs of the hidden links; judging whether the websites corresponding to the URLs of the hidden links are phishing websites or not, and if phishing websites exist, adding the URLs corresponding to the phishing websites to a phishing website database. The precise collection system comprises an inquiry recording module, a ranking acquiring module, a hidden link detection module, a phishing website judging module, a phishing website collection module and the phishing website database, corresponding to the precise collection method. According to the invention, the phishing websites can be collected timely and precisely.

Description

technical field [0001] The invention belongs to the technical field of computer defense, and in particular relates to an accurate collection method and system based on phishing website propagation. Background technique [0002] Phishing website is a kind of network fraud, which means criminals use various methods to counterfeit the URL address and page content of the real website, or use the loopholes in the real website server program to insert dangerous HTML codes into some webpages of the site, so as to This will seriously affect the development of online financial services and e-commerce, endanger the public interest, and affect the fraudulent bank account. Public confidence in using the Internet. [0003] In order to prevent the harm of phishing websites, there are two current ideas: [0004] 1. Use a method or device to check phishing websites, such as a detection method and device for phishing websites in Chinese Patent No. 200910106659, a method and device for iden...

AI Technical Summary

Problems solved by technology

These methods or devices may have certain effects in the initial stage, but as phishing website creators become familiar with and understand the detection rules, the new phishing websites they create can easily pass their detection. The detection rate of phishing websites will gradually decrease, gradually failing to prevent them

[0005] 2. Establish a phishing website database. When a phishing website is found, add the phishing website to the database, and check whether the website is a phishing website through the database. This method has a high detection rate and accuracy, but a difficulty of this method is , timely collection of phishing websites

The random method will do a lot of useless work if it is not targeted; according to the first rule to judge the collection, there will be the same problem, and the detection rate of phishing websites will gradually decrease

Images