Malicious Url Capture Analysis System

At First, the paper summed up the current major technology of malicious URL attack, and also summed up the main characteristics and protection strategy about it, then described the main function of malicious URL capture and analysis system.Malicious URL capture and analysis system is based on the technology of malicious Web page honeynet, which includes URL identification, URL collection and URL classification system. It can collect malicious URL through the technology of the Forum-access, search engine, analysis of malicious code, spam analysis and LAN Sniffer. Finally, the system saves the classification of malicious URL into the database according to the extent of damage and attacks.The goal of malicious URL Capture and Analysis System is to collect a large number of malicious Web site URL address and malicious Web site to determine harmful levels of malicious URL. The system includes several modules: Malicious URL report Forum module, search engine module, malicious code analysis module, spam module, LAN Sniffer module to obtain a large number of suspected malicious URL. By check the URL through search engines and anti-virus engines, a malicious URL form will be created. And then the program monitor modules will analysis malicious URL to give the harmful levels.Finally, the paper gives the operating results of the system, which reflect the performance of the system and the advantages and disadvantages about it.