METHOD AND APPARATUS FOR IDENTIFYING MALICIOUS WEBSITE

摘要

Disclosed are a method and an apparatus for identifying a malicious website, the method including: acquiring uniform resource locators (URLs) of websites determined as malicious websites and URLs of websites determined as safe websites; performing feature extraction on the URLs of the malicious websites to obtain a first feature character set and performing feature extraction on the URLs of the safe websites to obtain a second feature character set; and determining whether a frequency of a first feature character obtained by feature extraction in the first feature character set is higher than a frequency in the second feature character set, and if the frequency of the first feature character in the first feature character set is higher than the frequency in the second feature character set, adding the first feature character into a malicious feature library, feature characters in the malicious feature library being used for identifying a malicious website.

主权项

1. A method for identifying a malicious website, comprising:
acquiring uniform resource locators (URL) of websites determined as malicious websites and URLs of websites determined as safe websites; performing feature extraction on the URLs of the malicious websites to obtain a first feature character set, and performing feature character extraction on the URLs of the safe websites to obtain a second feature character set; and determining whether a frequency of a first feature character obtained by feature extraction in the first feature character set is higher than a frequency in the second feature character set, and if the frequency of the first feature character in the first feature character set is higher than the frequency in the second feature character set, adding the first feature character into a malicious feature library, feature characters in the malicious feature library being used for identifying a malicious website.