The Monitoring And Precaution Of Malicious Web Pages And Its Security Threats

Malicious Web pages is a kind of destructive Web threats. It can help attackers to steal information from other Web users, or control other users’computers. Malicious Web pages has been widespread in the world, and has been made a large of economic losses to society. There are much software in the market now. These software companies analysis characteristics of malicious Web pages well, so their software can detect the known malicious Web pages quickly. However, the new characteristics emerging one after another, so we need to detect those unknown characteristics. The trending malicious act detecting method can detect some unknown malicious Web pages, but it also means high-level rate of false alarm and system showdown. However, the Web security companies focus on low-level rate of false alarm more, so that their software can’t detect unknown characteristics of malicious Web pages.Based on working experience, this thesis offers some security precautions of Web threats, and presented a system of detecting malicious Web pages. This system designs black list and white list, so it can detect malicious Web pages quickly. This system use SVM algorithm to detect unknown characteristics of malicious Web pages, and has better effect than other sorting algorithm in test. This system has two modes:security mode and high-efficiency mode. These methods focus on different points. Security mode detects all Web pages in detail, and high-efficiency mode visit Web page faster. On the other hand, this system has a hidden links detecting module. This module can give some reference to Website owner about flaws of their Website, and also help Website owner to against Trojan and other Web threats.This thesis has some significant of academic research. However, because of the limitation of time, sample size and hardware, there are also some regrets remain. The detection rate and user experience will be promoted in the future.