| 摘要 |
<p>Disclosed are a device, method and system for detecting malicious links. The device comprises: a second behaviour detector configured to detect suspicious behaviours of network resources and transmit detected suspicious links to a server-end device for further detection; a second obtainer configured to obtain a dangerous malicious website host name collection and a dangerous malicious link collection which are determined by the server-end device based on the suspicious links provided by the second behaviour detector; and a second link detector configured to detect new suspicious links according to the dangerous malicious website host name collection and the dangerous malicious link collection which are obtained by the second obtainer, and transmit the new suspicious links to the server-end device to detect and update relevant malicious values, other links embedded in the new suspicious links hitting the dangerous malicious website host name collection or the dangerous malicious link collection.</p> |
