Malvertising attack detection method

Abstract

The invention discloses a malvertising attack detection method. An open source creeper Nutch is used for extracting URL information in a website to be detected, only URL links related to advertisements are extracted in URL extraction, and the detection efficiency can be improved; URL to be detected is sent to an API to be verified, and whether the URL is safe or not can be judged according to response information; a library is achieved through Google search and international anti-fishing alliance, the scale of the library is very huge, and a large number of attack behaviors can be detected. The attack URL confirmed by API needs to be extracted from a set to be detected, information of the URL is recorded to a log file, and the output position, the output format and the log level of logs can be configured respectively; the malvertising attack behavior detected in log analysis is displayed in pie chart and bar chart forms, and the detection results can be displayed visually. The detection method is complete in rule, based on a client side, uniform detection of malvertising attacks can be achieved, and a good detection effect is achieved.

Description

technical field [0001] The invention belongs to the field of network methods, and more specifically, the invention relates to a malicious advertisement attack detection method. Background technique [0002] With the advent of the times, the Internet has become an inseparable part of people's lives. People can obtain various free services through the Internet every day. While many companies provide free services to Internet users, advertising has become their main source of income. At present, online advertising (1) has formed a huge business of tens of billions of dollars, and formed a complete industrial chain, which is mainly supported by multi-level large-scale infrastructure. Online advertising, originally served solely by advertisers with high-traffic websites, has evolved into the form of ad networks. Malicious advertisement attacks mainly refer to attacks on users using advertisements as carriers. This type of attack has the characteristics of large variability and s...

AI Technical Summary

Problems solved by technology

In addition, malicious advertisements may also come from the website itself. For some unknown small websites, unsafe third-party advertising links are used for profit. These link advertisements are easy to inject malicious attack codes

It is precisely because of the many sources of malicious advertisements and the strong mutation characteristics that malicious advertisement attacks have occurred frequently in recent years. These attacks have caused losses to users and at the same time attracted more and more attention.