恶意短链接欺骗的防护对策研究

摘要

Malicious urls can disguise themselves via short links. By using the trust relationship between users on the MicroBlog Platform, they cheat a large number of users for illegal purposes like Internet fraud. They are endangering the safety of the Internet users. This paper analyzed the principle of short link redirections, and discussed the short link generation algorithm and worklfow through the analysis of source code of a sample website. This paper, gave the detection mechanism of the malicious short links, and proposed the security measures which should be taken by users and short link servers against malicious short links.%恶意网址通过短链接伪装自身，利用微博平台的庞大用户群和用户间的信任关系，通过欺骗大量用户点击访问，实施网络欺诈等违法行为，严重危害了互联网安全。文章分析了短链接重定向的原理，并通过对网站源码解析，探讨了短链接生成的算法及工作流程。文章在长网址的恶意链接检测的基础上，针对恶意短链接，分别从用户和短链接服务端角度提出了所应当采取的安全措施。