The methodology and an application to fight against unicode attacks

ACM International Conference Proceeding Series

Volumn 149, Issue , 2006, Pages 91-101

  Fu, Anthony Y ^a,b   Deng, Xiaotie ^a   Wenyin, Liu ^a   Little, Greg ^b  

^a CITY UNIVERSITY OF HONG KONG   (Hong Kong)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Phishing; Secure web identity; Spam; Unicode

Indexed keywords

ALGORITHMS; DATA PROCESSING; PROBLEM SOLVING; SECURITY OF DATA; SEMANTIC WEB; SOFTWARE PROTOTYPING; WEBSITES;

PHISHING; SECURE WEB IDENTITY; SPAM; UNICODE;

COMPUTER CRIME;

EID: 34250778342     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1143120.1143132     Document Type: Conference Paper

References (29)

1. ANSI, American Standard Code for Information Interchange, www.ansi.org.
2. Anti-Phishing Group of City University of Hong Kong, http://antiphishing. cs.cityu.edu.hk
3. Anti-Phishing Working Group, http://www.antiphishing.org.
4. Berners-Lee T., Fielding R., Masinter L., RFC 3986: Uniform Resource Identifier (URI): Generic Syntax, The Internet Society (2005), Jan. 2005.
5. Chowdhury A., Frieder O., Grossman D., and McCabe. M. Collection statistics for fast duplicate document detection, ACM Transactions on Information Systems, Volume 20(2), pages 171-191, 2002.
6. Dhamija R., Tygar J. D., and Hearst M. Why Phishing Works, to appear in Proceedings of CHI-2006: Conference on Human Factors in Computing Systems, April 2006.
7. Dhamija R., Tygar J. D., The Battle against Phishing: Dynamic Security Skins, Symposium on Usable Privacy and Security 2005, pages 77-99, 2005.
8. Duerst M.,Suignard M., RFC 3987: Internationalized Resource Identifiers (IRIs), The Internet Society (2005), Jan. 2005.
9. Fu A. Y. Web Link Illustrator Demo for Microsoft IE, www.mit.edu/~ayf
10. Fu A. Y., Deng X., Liu W., A Potential IRI based Phishing Strategy, in the Proceedings of 6th International Conference on Web Information Systems Engineering, LNCS Volume 3806, pages 618-619, 2005
11. Fu A. Y., Liu W., Deng X., EMD based Visual Similarity for Detection of Phishing Webpages, in Proceedings of International Workshop on Web Document Analysis 2005, 2005.
12. Gabrilovich E. and Gontmakher A. The homograph attack. Communications of the ACM, 45(2):128, 2002.
13. Garfinkel, S., Miller, R., Johnny 2: A User Test of Key Continuity Management with S/MIME and Outlook Express. SOUPS, 2005.
14. Hoad T.C., Zobel J. Methods for identifying versioned and plagiarized documents, Journal of the American Society for Information Science and Technology, Volume 54(3), pages 203-215, 2003.
15. ICANN, http://www.icann.org/topics/idn/implementation-guidelines.htm
16. ICANN, http://www.icann.org/
17. Jakobsson M., Modeling and Preventing Phishing Attacks, Phishing Panel of Financial Cryptography, 2005.
18. Kantor P., Voorhees E., The TREC-5 Confusion Track: Comparing Retrieval Methods for Scanned Text, Information Retrieval, Volume 2(2/3), pages 165-176, 2000.
19. Knuth D., Morris J. H., and Pratt V., Fast pattern matching in strings. SIAM Journal on Computing, 6(2):323 C350. 1977. Citations. Original publication.
20. Levenshtein V.I., Binary codes capable of correcting deletions, insertions, and reversals, Cybernetics and Control Theory, Volume 10, pages707-710, 1966.
21. Liu W., Deng X, Huang G., Fu A. Y., An Anti-Phishing Strategy based on Visual Similarity Assessment, IEEE Internet Computing, Vol. 10, No. 2, pp. 58-65, 2006
22. Microsoft, Arial Unicode MS, Version 1.01, 2000.
23. Microsoft, Description of the Arial Unicode MS font in Word 2002, http://support.microsoft.com/kb/q287247.
24. Nanno T., Saito S., and Okumura M., Structuring Webpages based on repetition of elements, in Proceedings of the 7th International Conference on Document Analysis and Recognition, 2003.
25. Needleman S. and Wunsch C., A general method applicable to the search for similarities in the amino acid sequence of two proteins, Journal of Molecular Biology, 48(3):443-453, 1970.
26. Netscape, http://wp.netscape.com/eng/ssl3.
27. The Unicode Consortium, http://www.unicode.org.
28. Wood L., Document Object Model (DOM) Level 1 Specification, http://www.w3.org/TR/ REC-DOM-Level-1.
29. Wu, M., Miller, R., Garfinkel, S., Do Security Toolbars Actually Prevent Phishing Attacks?, to appear in CHI 2006