LogoPhish: A New Two-Dimensional Code Phishing Attack Detection Method

摘要

Traditional phishing detection methods are mostly based on computer platforms and cannot be directly applied to mobile devices. This paper proposes a new two-dimensional code phishing detection method called LogoPhish. We use the logo to determine the identity between a two-dimensional code's actual identity and the described identity. The method includes two processes: logo extraction and identity detection. The first process uses a mobile phone to scan the two-dimensional code to extract the logo and perform image processing. The second process uses the Google image search engine to determine the identity of the logo. Since the relationship between the logo and the domain name is exclusive, it is reasonable to use the domain name as an identifier. The experimental results show that LogoPhish has a good effect and is superior to the traditional detection method in the detection of two-dimensional code phishing attacks.