一种防范钓鱼网站的方法  

A method to anti-phishing

作　　者：程元斌[1] 

机构地区：[1]江汉大学数学与计算机科学学院,湖北430056

出　　处：《网络安全技术与应用》2011年第8期25-27,14,共4页Network Security Technology & Application

摘　　要：网络钓鱼是在线身份窃取的一种。近年来,网络钓鱼成为了在线身份窃取的主流。要防止网络钓鱼,最重要的是让用户能够识别网站的真伪。本文提出了一种让用户能够有效地识别网站真伪的技术:当用户需要辨别网站真伪时,先输入一个私数,上传到服务器;然后,服务器返回一组与此私数相关的特有的防钓码,用户看到这组防钓码,便知网站真假。由于防钓码因由户给出的私数而异,钓鱼者很难伪造,运用此法可有效的防范钓鱼网站。Phishing is a kind of online identity theft.In recent years,phishing has become the mainstream of online identity theft.To prevent phishing,the most important thing is to enable users to identify the authenticity of the site.This paper described a way for users to effectively identify the authenticity of a Web site： when the user needs to identify the authenticity of sites,first enter a private number and uploaded it to the server;then,the server returns a anti-fishing code that associated with this private number;then,the user knows true or false of the website as soon as he sees this anti-fishing code.

关 键 词：网络安全 在线身份窃取 网络钓鱼 防钓码 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]