【摘要】 通过分析当前流行的仿冒医保网站诈骗典型过程,针对潜在受害者与仿冒网站的网络行为进行流量采集、协议过滤、报文分析,获得了当前仿冒医保网站诈骗过程中HTTP请求报文和HTTP响应报文的典型特征,提出了一种仿冒医保网站诈骗治理方案。本方案可实现事前监测识别诈骗域名、事中获取潜在受害者信息用于预警、事后反网络诈骗技战法储备。以某单位安全部门为试点,以反诈预警时效性和涉诈情报准确性为衡量标准进行应用效果评估,结果表明,依据流量报文特征建立的治理体系框架可有效治理当前的仿冒医保网站诈骗。更多还原

【Abstract】 By analyzing the typical process of the current phishing website medical insurance fraud, and analyzing the characteristics of the communication behavior between the victim and the phishing website medical insurance fraud, combined with the characteristics of the firewall product, this paper proposes a medical insurance fraud governance scheme based on the message characteristics in the view of the firewall. Through traffic collection, protocol filtering, message analysis and feature summary, the scheme clarifies the handling method of communication traffic between potential victims and medical insurance fraud of counterfeit websites. Taking the security department of a certain unit as a pilot, the application effect was evaluated based on the timeliness of anti-fraud early warning and the accuracy of fraud-related information. The results showed that the treatment of counterfeit website medical insurance fraud based on message characteristics can effectively prevent counterfeit website medical insurance fraud cases.更多还原