Research on QR Code Phishing Detection

doi:10.3969/j.issn.1671-1122.2020.09.009

Abstract

Abstract:

In recent years, the number of fraud cases through phishing websites has been increasing year by year. Compared with traditional phishing methods, QR code is favored by criminals because of its low production threshold, wide use range, and high success rate in implementing phishing. On the basis of analyzing and summarizing the implementation process of phishing based on QR code and its destructiveness, this article focuses on detecting abnormal features from two aspects of URL structure and Web page structure, and realizes QR code phishing detection based on SVM.

Key words: phishing website, QR code, network security, URL detection

CLC Number:

TP309

LIU Daheng, LI Hongling. Research on QR Code Phishing Detection[J]. Netinfo Security, 2020, 20(9): 42-46.

Figures/Tables 4

References 8

[1]	YAN Yuwei. Overview of QR Code Technology and Its Application[J]. Intelligent Computer and Applications, 2019,9(5):94-97.
	燕雨薇. 二维码技术及其应用综述[J]. 智能计算机与应用, 2019,9(5):94-97.
[2]	GARERA S, PROVOS N, CHEW M, et al. A Framework for Detection and Measurement of Phishing Attacks[C]// ACM. 14th ACM Conference on Computer and Communications Security 2007, November 2, 2007,Alexandria Virginia, USA. New York: ACM, 2007: 1-8.
[3]	MA J, SAUL L K, SAVAGE S, et al. Learning to Detect Malicious URLs[J]. ACM Transactions on Intelligent Systems and Technology, 2011,2(3):1-30.
[4]	WANG Yuqi, LIU Bowen, LIN Guoyuan. Phishing Detection Algorithm Based on Language Features of URL[J]. Computer Engineering and Applications, 2019,55(24):84-90.
	王雨琪, 刘博文, 林果园. 基于URL语言特征的钓鱼网站检测算法[J]. 计算机工程与应用, 2019,55(24):84-90.
[5]	PANG Shuang. Phishing Defense Research for QR Code[D]. Changsha: Central South University of Forestry and Technology, 2016.
	庞爽. 面向QR码的网络钓鱼防御研究[D]. 长沙:中南林业科技大学, 2016.
[6]	VIDAS T, OWUSU E, WANG Shuai, et al. Qrishing: The Susceptibility of Smartphone Users to QR Code Phishing Attacks[M]// Springer. Financial Cryptography and Data Security. Heidelberg: Springer, Belin, Heidelberg, 2013: 52-69.
[7]	CHAI Yanna. Research of Anti-phishing for QR Code[J]. Computer Technology and Development, 2020(4):100-104.
	柴艳娜. QR二维码防钓鱼的研究[J]. 计算机技术与发展, 2020(4) 100-104.
[8]	ZOU Xueqiang, ZHANG Peng, HUANG Caiyun, et al. Phishing Attacks Discovery Based on HTML Layout Similarity[J]. Journal on Communications, 2016,37(Z1):116-124.
	邹学强, 张鹏, 黄彩云, 等. 基于页面布局相似性的钓鱼网页发现方法[J]. 通信学报, 2016,37(Z1):116-124.

特征取值	含义
F₁=1 F₁=0	IP地址代替URL地址不是由IP地址代替URL地址
F₂=1 F₂=0	URL中符号“.”超过6个 URL中符号“.”不超过6个
F₃=1 F₃=0	URL中包含符号“@” URL中不包含符号“@”
F₄=1 F₄=0	URL中字符长度超过23 URL中字符长度不超过23
F₅=1 F₅=0	URL中含有两个及两个以上“http”标识 URL中仅含有一个“http”标识
F₆=1 F₆=0	URL中包含非标准端口 URL中不包含非标准端口
F₇=1 F₇=0	URL是短链接 URL不是短链接
F₈~F₁₅有1 F₈~F₁₅有0	URL含有为1项所对应的敏感词 URL不含有为0项所对应的敏感词
F₁₆~F₂₅有1 F₁₆~F₂₅有0	URL含有为1项所对应的商标名称词汇 URL不含有为0项所对应的商标名称词汇

特征取值	含义
F₂₆=1 F₂₆=0	页面中含有跨域引用资源页面中不含有跨域引用资源
F₂₇=1 F₂₇=0	ICP注册信息错误 ICP注册信息正确

[1]	LI Shibin, LI Jing, TANG Gang, LI Yi. Method of Network Security States Prediction and Risk Assessment for Industrial Control System Based on HMM [J]. Netinfo Security, 2020, 20(9): 57-61.
[2]	LAI Jiangliang, HOU Yifan, LU Xuming. Research on Comprehensive Effectiveness Analysis of Network Security System Based on Information Metrics and Loss [J]. Netinfo Security, 2020, 20(8): 81-88.
[3]	MENG Xiangru, XU Jiang, KANG Qiaoyan, HAN Xiaoyang. Secure Virtual Network Embedding Algorithm Based on Entropy Weight VIKOR [J]. Netinfo Security, 2020, 20(5): 21-28.
[4]	ZHAO Zhiyan, JI Xiaomo. Research on the Intelligent Fusion Model of Network Security Situation Awareness [J]. Netinfo Security, 2020, 20(4): 87-93.
[5]	JING Tao, WAN Wei. Research on a P2P Network Communication Behavior Analytical Method for Status Migration Attribute-oriented [J]. Netinfo Security, 2020, 20(1): 16-25.
[6]	Yue QIU. Network Security Risk Analysis and Assessment of Large-scale Sports Events [J]. Netinfo Security, 2019, 19(9): 61-65.
[7]	Mengru GAO, Fangjun XIE, Hongqin DONG, Xiang LIN. Research on Network Security Evaluation System Oriented to Critical Information Infrastructure [J]. Netinfo Security, 2019, 19(9): 111-114.
[8]	Wenli SHANG, Long YIN, Xianda LIU, Jianming ZHAO. Construction Technology and Application of Industrial Control System Security and Trusted Environment [J]. Netinfo Security, 2019, 19(6): 1-10.
[9]	Ke ZHANG, Youjie WANG, Shaoyin CHENG, Lidong WANG. Intrusion Collaborative Disposal Method of Spoofed IP Address in DDoS Attacks [J]. Netinfo Security, 2019, 19(5): 22-29.
[10]	Jianming FU, Lin LI, Rui ZHENG, Suriguga. Survey of Network Attack Detection Based on GAN [J]. Netinfo Security, 2019, 19(2): 1-9.
[11]	Li WEI, Qin DUAN, Zhiwei LIU. A Summary of Medical Information Security Management in Internet Era [J]. Netinfo Security, 2019, 19(12): 88-92.
[12]	Ran ZI, Jia LIU. Research on Construction of Risk and Trust Architecture Based on Lean Trust [J]. Netinfo Security, 2019, 19(10): 32-41.
[13]	Jie QU, Chunling FAN, Guangyong CHEN, Jintao ZHAO. Research on Establishment of Network Security Service Ability System for A New Era [J]. Netinfo Security, 2019, 19(1): 83-87.
[14]	Gang LU, Ronghua GUO, Ying ZHOU, Jun WANG. Review of Malicious Traffic Feature Extraction [J]. Netinfo Security, 2018, 18(9): 1-9.
[15]	Yi LI, Jian GU, Tiejun GU. Knowledge Modeling and Application of Quality Evaluation System for Complex Network Security Product [J]. Netinfo Security, 2018, 18(9): 55-59.