关键词: 钓鱼网站, 统一资源定位符（URL）, 语言特征, 基元, 敏感度

Abstract: In order to deal with detection avoidance strategies of phishing sites, a phishing detection algorithm based on language features of URL is proposed. Through analyzing the differences in different detection domains of phishing sites and legal sites, the concept of motif and sensitivity is defined to describe language features. First of all, the similarity of main level domain is detected based on motif. When the similarity is lower than the pre-set threshold, valid subdomain features are selected. Then language features of subdomains are studied and detected using random forests. The results show that the accuracy rate of the proposed algorithm is 95.6%. The system running time is relatively less, and the average recognition time is less than 1 s.

Key words: phishing site, Uniform Resource Locator（URL）, language feature, motif, sensitivity