网络钓鱼攻击的防御技术及防御框架设计  

Defense technology of phishing attack and design of defense framework

作　　者：赵跃华[1] 胡向涛[1] 

机构地区：[1]江苏大学计算机科学与通信工程学院,江苏镇江212013

出　　处：《计算机应用研究》2013年第6期1863-1866,共4页Application Research of Computers

摘　　要：现有的反钓鱼技术多是通过检测可疑网站与真实网站的URL和网页相似度来检测钓鱼攻击,而对于新出现的在网页中嵌入恶意代码的钓鱼攻击防御效果不佳。在分析当前的网络钓鱼攻击防御技术的基础上,针对传统方法不能防御的新型钓鱼攻击给出了解决方法,并融合传统的防御技术提出了一个防御钓鱼攻击的整体框架,弥补现有防御方法的不足,从而提高了钓鱼攻击的检测率,降低了漏报率。实验结果表明,提出的方法是有效的。The current anti-phishing technologies detect the phishing attacks through comparing similarity of URL or Web pages between suspect Website and real Website.However,it cannot work effectively on those new attacks by the insertion of malicious code to Web pages.Based on analysis of existing defense technologies of phishing attacks,this paper put forward solutions to those new attacks which couldn＇t be prevented by traditional methods.It also proposed a further new overall defensive framework which incorporated traditional ones,to make up defects of the original methods,increased the detection rate of phishing attacks,and decreased the false negative rate.Experimental results show that the proposed defense methods are effective.

关 键 词：网络钓鱼 跨站脚本 木马 键盘记录 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]