规避网络钓鱼给证券行业带来的安全风险

网上交易作为证券行业进行业务开展的主要手段之后,网上交易的安全性就成了人们日益关注的话题。在网上交易过程中,网络钓鱼攻击是一种重要的攻击方式。由于此方式的特殊性,导致被害用户损失严重。所以做好网络钓鱼的防范,对于证券行业具有很大的现实意义。这里从网络钓鱼的实施过程、社会危害及防范方法等几个角度,对网络钓鱼进行全面的阐述,详细描述了恶意分子如何引导用户去访问恶意网站,以及网络钓鱼的主要防范技术,如黑白名单检测技术、页面相似度检查技术,从技术角度和用户的上网行为角度,提出了相关的方法,尽量规避网络钓鱼技术给证券行业带来的安全风险。

Avoidance of the Safety Risk Brought on Securities Industry by Phishing

As an important means for business development in securities industry,the internet trading provides the user with an efficient and portable trade channel,and also an opportunity for cyber online crime activities. Phishing,as an important attack in present online securities trading,brings huge economic loss to the investors and securities companies. For the changes of phishing attack form,this paper first describes the typical phishing attack modes,analyzes how the criminal guides the user to malicious website,and discusses the implementation process of network fishing. Also main techniques for phishing prevention,including cloud security-based black and white list detection technology,page similarity detection technology. From the angles of financial service providers and users,this paper proposes some relative prevention measures,which are of great practical significance in preventing the network phishing.