Fraud gang identification method based on network flow, controller and medium

Abstract

The invention relates to a fraud gang identification method based on network flow, a controller and a medium. The method comprises steps of obtaining the network fraud flow of a plurality of to-be-tested accounts, and extracting the network fraud data corresponding to each to-be-tested account from the network fraud flow; sequentially performing association degree calculation on every two to-be-tested accounts in the plurality of to-be-tested accounts based on the network fraud data to obtain a first association degree, and if the first association degree is greater than a first association degree threshold, combining the corresponding to-be-tested accounts into a to-be-identified gang; and performing association degree calculation on the to-be-identified gang and a preset historical existing gang based on the network fraud data to obtain a second association degree, and if the second association degree is greater than a second association degree threshold, combining the to-be-identified gang and the historical existing gang into a fraud gang. According to the method, the network fraud gang can be quickly and accurately identified, and identity of the fraud gang can be traced back.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network traffic-based fraud gang identification method, a controller and a medium. Background technique [0002] Most of the existing fraud group identification technologies are based on VoIP (Voice over Internet Protocol, VoIP for short). By scanning the global IP addresses, obtain the information transmitted by the active VoIP platforms, and analyze and confirm the bill data of VoIP Internet calls initiated by these VoIP platforms, so as to judge whether the VoIP platforms are used to initiate telephone fraud, which is convenient for overseas telephone fraud Behavior is investigated. [0003] However, the existing VoIP-based technology for identifying fraudulent gangs usually cannot directly determine the real-time real-time identity information of people behind the fraudulent behavior directly through VoIP information, let alone obtain the information of fraudulent...

AI Technical Summary

Problems solved by technology

[0003] However, the existing VoIP-based technology for identifying fraudulent gangs usually cannot directly determine the real-time real-time identity information of people behind the fraudulent behavior through VoIP information, let alone obtain the information of fraudulent gangs, resulting in low identification efficiency and poor traceability

In addition, fraudulent activities through the Internet, such as false loans, false investments, false shopping, etc., will not be carried out using VOIP phones, but directly through fake websites to defraud investors of their property. Identifying fraudulent gangs based on VoIP cannot solve the problem based on Fraudulent behavior through the Internet

Images