教育类官网推广感染研究  

Study on promotional infections hosting on educational websites

作　　者：王郁 张一铭 张甲[1] 段海新[1] WANG Yu;ZHANG Yiming;ZHANG Jia;DUAN Haixin(Institute for Network Sciences and Cyberspace,Tsinghua University,Beijing 100084,China)

机构地区：[1]清华大学网络科学与网络空间研究院,北京100084

出　　处：《通信学报》2018年第A01期78-85,共8页Journal on Communications

基　　金：国家自然科学基金资助项目(No.U1636204;No.61472215);国家重点研发计划课题(No.2017YFB0803202);塞尔网络下一代互联网技术创新项目(No.NGⅡ20160403)~~

摘　　要：通过设计和搭建推广感染检测系统,对教育网edu.cn域名及教育部备案的中小学域名进行了测量。经过对测量结果的分析,发现有4.68%的高校域名及2.75%的中小学域名下存在推广感染,同时分析了推广感染页面的行为特征,检测出在高校和中小学站点中分别有39.5%和20.7%的推广感染页面存在伪装或引流行为。这些测量结果揭示了教育类官网当前所面临的内容被篡改和植入的问题。此外,使用的测量方法也可以协助运维人员进行自身网站的推广感染检测。Through the design and construction of the promotional infection detecting system,the CERNET edu.cn domain names and the primary&secondary school domain names filed by the Ministry of Education were measured.After analyzing the measurement results,it was found that there were 4.68%of university domain names and 2.75%of primary and secondary school domain names were infected,and after analyzing the behavioral characteristics of the promotional infection pages,detecting 39.5%promotional infection pages on edu.cn websites and 20.7%on primary&secondary school websites have cloaking or redirecting behaviors.These measurements reveal the problems that the current content of the education official website has been tampered with and implanted.In addition,the measurement method used can also assist the operation and maintenance personnel to carry out the promotion of infection detection on their own websites.

关 键 词：推广感染检测 地下经济 黑帽SEO 教育网 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]