网络钓鱼攻击的在线检测及防治

为了防止攻击者通过网络钓鱼(phishing)这种新型的网络攻击手段窃取用户的个人信息,通过对APWG提供的phishing档案数据的分析,得出了phishing攻击中超链的一般特性,并据此提出了一种新的基于终端系统的反phishing算法--LinkGuard.LinkGuard基于phishing攻击的一般特性,因而不但对已知的phishing攻击有效,而且可以检测出未知的phishing攻击.在Windows XP上实现了LinkGuard算法.实验表明,LinkGuard成功地检测出了203份phishing攻击中的195份,检测率达到了96%.实验还表明,LinkGuard是个轻量级程序,可以实时预防phishing攻击的发生.

Online detection and prevention of phishing attacks

Phishing is a new type of network attack where the attacker creates a faked web page to fool users into submitting personal information. The phishing data archive provided by APWG were analyzed firstly, and then a new end-host based anti-phishing algorithm, LinkGuard was proposed. LinkGuard can detect both known and unknown phishing attacks. Our implementation of LinkGuard in Windows XP has verified that it successfully detects 195 out of the 203 phishing attacks. The experiments also show that LinkGuard is lightweighted and can detect and prevent phishing attacks in real-time.