Adaptive security threat analysis method and system for counterfeit domain name

• Main Authors: YANG JINCUI, GUAN JIANFENG, SHI RUISHENG, WANG DONGBIN, ZHANG WANCHENG, SHI JINQIAO, LI JIAWEI
• Format: Patent
• Language: Chinese; English
• Published: 28.02.2020
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The embodiment of the invention provides an adaptive security threat analysis method and system for counterfeit domain names. The method comprises the steps of obtaining a plurality of suspected domain names of each trusted domain name according to an existing trusted domain name set, and enabling each trusted domain name and one corresponding suspected domain name to form a domain name pair; determining the quantized values of a plurality of check indexes of each domain name pair according to domain name information and the domain name webpage contents of the two domain names in each domain name pair; and obtaining the credibility of the suspected domain name in the domain name pair according to the quantized values of the plurality of check indexes and the preset weight of each check index so as to represent the threat degree of the suspected domain name to the credible domain name. According to the method, a comprehensive suspected domain name evaluation index system can be established instead of post-even