A self-healing, self-protecting collaborative intrusion detection architecture to trace-back fast-flux phishing domains

2008 IEEE Network Operations and Management Symposium Workshops - NOMS 08

Volumn , Issue , 2008, Pages 321-327

  Zhou, Chenfeng Vincent ^a   Leckie, Christopher ^a   Karunasekera, Shanika ^a   Peng, Tao ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER NETWORKS; DISTRIBUTED COMPUTER SYSTEMS; INFORMATION DISSEMINATION; INTERNET; INTERNET PROTOCOLS; INTERNET SERVICE PROVIDERS; SECURITY OF DATA; SIGNAL DETECTION; WEBSITES; WORLD WIDE WEB;

PHISHING;

INTRUSION DETECTION;

EID: 51149084743     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMSW.2007.50     Document Type: Conference Paper

References (25)

1. Anti-Phishing Working Group, http://www.antiphishing.org/.
2. T. Moore and R. Clayton, "Examining the impact of website take-down on phishing," Proceedings of the Anti-Phishing Working Groups 2nd Annual eCrime Researchers Summit, pp. 1-13, 2007.
3. Gartner Inc., "Gartner Says Number of Phishing E-Mails Sent to U.S. Adults Nearly Doubles in Just Two Years, 2006 Press Release, 9 Nov 2006," http://www.gartner, com/it/page, jsp?id=498245.
4. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. Mitchell, "Client-side defense against web-based identity theft," in Proceedings of Network and Distributed Systems Security (NDSS), 2004.
5. Cloudmark Inc., http://www.cloudmark.com/desktop/download/.
6. eBay Inc., "Using eBay Tool's Account Guard," http://pages.eBay.com/help/confidence/accountguard.html.
7. M. Jakobsson and S. Myers, Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft. Wileylnterscience, 2006.
8. C. Drake, J. Oliver, and E. Koontz, "Anatomy of a Phishing Email," Conference on Email and Anti Spam (CEAS), 2004.
9. D. Miyamoto, H. Hazeyama, and Y. Kadobayashi, "SPS: a simple filtering algorithm to thwart phishing attacks," Lecture Notes in Computer Science, vol. 3837, p. 195, 2005.
10. W. Liu, G. Huang, X. Liu, M. Z. and X. Deng, "Detection of phishing webpages based on visual similarity," International World Wide Web Conference, pp. 1060-1061, 2005.
11. C. Kruegel, T. Toth, and C. Kerer, "Decentralized Event Correlation for Intrusion Detection," in International Conference on Information Security and Cryptology (ICISC), 2001.
12. M. Locasto, J. Parekh, A. Keromytis, and S. Stolfo, "Towards Collaborative Security and P2P Intrusion Detection," in Proceedings of the 2005 IEEE Workshop on Information Assurance and Security, 2005.
13. C. V. Zhou, S. Karunasekera, and C. Leckie, "Evaluation of a Decentralized Architecture for Large Scale Collaborative Intrusion Detection," in the Tenth IFIP/IEEE International Symposium on Integrated Network Management (IM), Germany, 2007, pp. 80-89.
14. L. Chan and S. Karunasekera, "Systematic Development of Quality Aware Decentralised Service-Oriented Systems," Seventh International Conference on Quality Software, 2007. QSIC'07., pp. 250-255, 2007.
15. IBM research, "Autonomic Computing," http://www.research.ibm. com/autonomic.
16. The Honeynet Project & Research Alliance, "Know Your Enemy: Fast-Flux Service Networks," 2007, http://www.honeynet.org/papers/ff/.
17. C. V. Zhou, S. Karunasekera, and C. Leckie, "A Peer-to-Peer Collaborative Intrusion Detection System," in IEEE International Conference on Networks (ICON), Malaysia, 2005, pp. 118-123.
18. NIST, F.P.U.B., "180-1: Secure Hash Standard," April 1995.
19. Anonymizer Inc., http://www.anonymizer.com/.
20. The Free Haven Project, http://tor.eff.org/.
21. Y. Zhang, S. Egelman, L. Cranor, and J. Hong, "Phinding Phish: Evaluating Anti-Phishing Tools," Proceedings of the 14th Annual Network and Distributed System Security Symposium (NDSS 2007), San Diego, CA, vol. 28, 2007.
22. S. E. Schechter, R. Dhamija, A. Ozment, and I. Fischer, "The Emperor's New Security Indicators," in SP'07: Proceedings of the 2007 IEEE Symposium on Security and Privacy. Washington, DC, USA: IEEE Computer Society, 2007, pp. 51-65.
23. M. Wu, R. Miller, and S. Garfinkel, "Do security toolbars actually prevent phishing attacks?" Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, pp. 601-610, 2006.
24. Cisco Systems, Inc., "Sampled NetFlow," http://www.cisco.com/ univercd/cc/td/doc/product/software/iosl20/120ne wft/1201imit/120s/120sll/12s. sanf.pdf.
25. PhishTank, http://www.phishtank.com/.