Phishing Detecting Method and Network Apparatus and Computer Readable Storage Medium Applying the Method

A network apparatus comprising:

• a network card for building a connection with a network;
• a database for storing a plurality of pre-stored page snapshots, wherein each of the pre-stored page snapshots corresponds to a pre-stored address;
• and
• a processing unit electrically connected to the network card and the database, wherein the processing unit comprises:
• a request receiving module for receiving a web-page accessing request for accessing a target web page at a target address;
• a web-page obtaining module for obtaining the target web page from the target address through the network;
• a snapshot obtaining module for snapshoting the target web page to obtain a present page snapshot;
• a snapshot comparing module for comparing the present page snapshot with the pre-stored page snapshots stored in the database;
• an address comparing module, wherein if the present page snapshot matches one of the pre-stored page snapshots, the address comparing module compares the target address with the pre-stored address, corresponding pre-stored page snapshot of which matches the present page snapshot;
• and
• a noticing module, wherein if the target address does not match the pre-stored address, the corresponding pre-stored page snapshot of which matches the present page snapshot, the noticing module determines that the target web page is a phishing web page and generates a notice signal.

A computer readable storage medium with a computer program to execute a phishing detecting method, wherein the phishing detecting method comprises:

• (a) receiving a web-page accessing request for accessing a target web page at a target address;
• (b) obtaining the target web page from the target address;
• (c) snapshoting the target web page to obtain a present page snapshot;
• (d) comparing the present page snapshot with a plurality of pre-stored page snapshots stored in a database, wherein each of the pre-stored page snapshots corresponds to a pre-stored address;
• (e) if the present page snapshot matches one of the pre-stored page snapshots, comparing the target address with the pre-stored address, corresponding pre-stored page snapshot of which matches the present page snapshot;
• and
• (f) if the target address does not match the pre-stored address, the corresponding pre-stored page snapshot of which matches the present page snapshot, determining that the target web page is a phishing web page.