a pharming attack hybrid detection model based on ip addresses and web content：一个域欺骗攻击的混合检测模型的基础上，ip地址和网页内容.pdf

Optik 126 (2015) 234–239 Contents lists available at ScienceDirect Optik j o u r n a l h o m epage: w w w. elsev ier.de/ijleo A pharming attack hybrid detection model based on IP addresses and web content Yuancheng Li, Shengnan Chu ∗ , Rui Xiao School of Control and Computer Engineering, North China Electric Power University, Beijing 102206, PR China a r t i c l e i n f o a b s t r a c t Article history: Pharming is an advanced form of attack intended to redirect a website’s traffic to another, bogus site. Received 26 December 2013 Using traditional phishing detecting technologies cannot detect pharming attacks effectively. At present, Accepted 15 August 2014 few research works against pharming attacks have been done and the solutions are relatively rough. Pharming has become of major concern to businesses hosting ecommerce and online banking websites. Keywords: Sophisticated measures known as anti-pharming are strong required to protect against this serious threat. Pharming In this paper we proposed a client pharming attack hybrid detection model which is based on web content Phishing and IP addresses. The proposed solution is divided into two steps. At the first step, multiple DNS servers are Page content used to verify the authenticity of the resolved IP address which is corresponding to URL of the