网络钓鱼攻击的在线检测及防治  

Online detection and prevention of phishing attacks

作　　者：陈涓[1] 郭传雄[1] 

机构地区：[1]解放军理工大学通信工程学院,江苏南京210007

出　　处：《解放军理工大学学报（自然科学版）》2007年第2期133-138,共6页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60503049)

摘　　要：为了防止攻击者通过网络钓鱼(phishing)这种新型的网络攻击手段窃取用户的个人信息,通过对APWG提供的phishing档案数据的分析,得出了phishing攻击中超链的一般特性,并据此提出了一种新的基于终端系统的反phishing算法——LinkGuard。LinkGuard基于phishing攻击的一般特性,因而不但对已知的phishing攻击有效,而且可以检测出未知的phishing攻击。在Windows XP上实现了LinkGuard算法。实验表明,LinkGuard成功地检测出了203份phishing攻击中的195份,检测率达到了96%。实验还表明,LinkGuard是个轻量级程序,可以实时预防phishing攻击的发生。Phishing is a new type of network attack where the attacker creates a faked web page to fool users into submitting personal information. The phishing data archive provided by APWG were analyzed firstly, and then a new end-host based anti-phishing algorithm, LinkGuard was proposed. LinkGuard can detect both known and unknown phishing attacks. Our implementation of LinkGuard in Windows XP has verified that it successfully detects 195 out of the 203 phishing attacks. The experiments also show that LinkGuard is lightweighted and can detect and prevent phishing attacks in real-time.

关 键 词：网络安全 phishing攻击 超链 LinkGuard算法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] E919[自动化与计算机技术—计算机科学与技术]