QR二维码防钓鱼的研究  

Research of Anti-phishing for QR Code

作　　者：柴艳娜[1] CHAI Yan-na(Dept.of Information and Network Management,Chang爷an University,Xi爷an 710064,China)

机构地区：[1]长安大学信息与网络管理处,陕西西安710064

出　　处：《计算机技术与发展》2020年第4期100-104,共5页Computer Technology and Development

基　　金：陕西省信息化重点建设项目(2171-20120042);陕西省网络态势感知平台建设项目(0031-214024160305)。

摘　　要：QR码(quick response code)是一种简单易用的矩阵条码。随着移动互联网的崛起和繁荣,已经广泛应用于人们的日常活动中。它给人们带来便利的同时,还伴有钓鱼网站、病毒软件、信息泄漏等网络安全风险和恶意攻击。越来越多的钓鱼攻击由传统的诱导式电子邮件转变为一扫即开的二维码,堂而皇之地在移动互联网世界里游荡。新闻稿中也屡见各种伪造二维码、钓鱼二维码导致人们的信息和财产受到损失的报道。目前流行的具有支持扫码功能的App如微信、支付宝等均无法有效甄别钓鱼网站。文中分析了QR码的基本结构和原理,钓鱼网站以及防范钓鱼的传统技术,从URL结构和网页内容两个方面分析钓鱼网站的异常特征,并且相应地给出检测方法和数学模型,设计并实现Android平台的QR码钓鱼网站识别技术。QR code(quick response code),as a type of matrix barcode(or two-dimensional barcode),has became popular due to the rise and prosperity of mobile Internet. It brings convenience to people at the same time,but also accompanied by network security risks and malicious attacks like the phishing website,virus software,data leak and so on. More and more phishing website show up as faked QR code in mobile Internet instead of classical e-mail,and you can see news that the faked QR code causes money losing and data leak cases. Currently,most popular apps with support for code scanning,such as Wechat,Alipay,can’t identify phishing website in QR code. Therefore,we analyze basic structure and working way of QR,research phishing website and the classical way to prevent. We can figure out exception behavior from URL structure and source code of web page from phishing website,then point out the detective way and math model,design and implement a platform to prevent phishing website for Android.

关 键 词：网络安全 QR 二维码 钓鱼网站 安卓 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]