Method and device for detecting malicious website

Abstract

The invention discloses a method and a device for detecting a malicious website. The detection method comprises the following steps of receiving an URL (universal resource locator) detection request, analyzing the content of a webpage pointed by an URL of the URL detection request, and judging if the webpage is a non-character webpage or not; if the webpage is the non-character webpage, obtaining the displayed webpage picture of the URL of the URL detection request in a browser; detecting the generated webpage picture, and obtaining the webpage attribute of the URL of the URL detection request; according to the webpage attribute of the URL of the URL detection request, determining if the URL is the malicious website or not. The detection method for the malicious website not only can effectively identify the malicious website of the whole webpage picture type, but also can effectively identify the malicious website which escapes the detection through various encrypting methods, malicious interference and the like, thereby guaranteeing the security of a user obtaining the website information.

Description

technical field [0001] The invention relates to the field of URL detection, in particular to a detection method and device for a malicious website. Background technique [0002] The Internet has enriched people's lives, but more and more pornographic, fraudulent and phishing websites are also emerging one after another, which seriously threatens the safety of Internet users obtaining information on the Internet. Therefore, a detection engine for identifying malicious URLs is needed. [0003] The existing URL cloud detection engine can effectively identify and prompt whether the URL (Uniform / Universal Resource Locator, Uniform Resource Locator) accessed by the user has malicious characteristics. After the user enters the URL to be accessed and before the browser displays the page content, the URL cloud detection engine needs to go to the cloud detection center to obtain the malicious attributes of the URL accessed by the user, identify it, and give relevant prompts. Due to...

AI Technical Summary

Problems solved by technology

[0007] (2) Encrypt and hide plain text: Since the current technology mainly relies on the text information of the page, the writers of malicious web pages use encryption technology to encrypt the plain text information. Therefore, when the discrimination module encounters a string without any semantics When the encrypted string is used, the malicious webpage cannot be effectively identified;

Images