A layout-similarity-based approach for detecting phishing pages

Proceedings of the 3rd International Conference on Security and Privacy in Communication Networks, SecureComm

Volumn , Issue , 2007, Pages 454-463

  Rosiello, Angelo P E ^a   Kirda, Engin ^b   Kruegel, Christopher ^b   Ferrandi, Fabrizio ^a  

^a POLITECNICO DI MILANO   (Italy)

^b VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

PHISHING;

COMPUTER NETWORKS; ERRORS;

TELECOMMUNICATION NETWORKS;

EID: 51349089199     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCOM.2007.4550367     Document Type: Conference Paper

References (25)

1. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. Mitchell. Client-side defense against web-based identity theft. In 11th Annual Network and Distributed System Security Symposium (NDSS '04), San Diego, 2005.
2. A. Chowdhary, S. Kale, P. Saripella. N. Sehgal, and R. Gupta. A general approach for regularity extraction in datapath circuits. IEEE Transactions on CAD, 18(9), 1999.
3. R. Dhamija and J. D. Tygar. The battle against phishing: Dynamic security skins, in Proceedings of the 2005 symposium on Usable privacy and security, New York, NY, pages 77-88. ACM Press, 2005.
4. R. Dhamija, J. D. Tygar, and M. Hearst. Why Phishing Works. In Proceedings of the Conference on Human Factors In Computing Systems (CHI) 2006, Montreal, Canada. ACM Press, 2006.
5. S. Djoko, D. J. Cook, and L. B. Holder. Analyzing the Benefits of Domain Knowledge in Substructure Discovery. in Proceedings of the First International Conference on Knowledge Discovery and Data Mining, pages 75-80, 1995.
6. eBay. eBay tool bar. http://pages.ebay.com/ebaytoolbar/, 2007.
7. Gartner Press Release. Gartner Says Number of Phishing E-Mails Sent to U.S. Adults eearly Doubles in Just Two Years. http://www.gartner.com/it/page. jsp?id=498245, 2006.
8. F. Harary. Graph Theory. Addison-Wesley, 1969.
9. E. Kirda and C. Kruegel. Protecting Users against Phishing Attacks. The Computer Journal, 2006.
10. T. Kutzenschebauch, and L. Stok. Regularity Driven Logic Synthesis. In Proceedings of the International Conference on Computer-Aided Design, pages 439-446, 2000.
11. T. Kutzschebauch. Efficient Logic Optimization Using Regularity Extraction. In Proceedings of the International Conference on Computer Design, pages 487-493, 2000.
12. C. Ludl, S. McAllister, E. Kirda, and C. Kruegel. On the Effectiveness of Techniques to Detect Phishing Sites. In Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA) 2007 Conference, Lucerne, Switzerland. Springer LNCS, July 2007.
13. McAfee. McAfee SiteAdvisor. http://www.siteadvisor.com, 2007.
14. Microsoft. Sender ID Home Page. http://www.microsoft.com/mscorp/safety/ technologies/senderid/default.mspx, 2007.
15. Mozilla Extensions. Home Page. http://update.mozilla.org/extensions/, 2005.
16. NetCraft. Netcraft anti-phishing tool bar. http://toolbar.netcraft.com, 2007.
17. Nick Dikean. XULTU Tutorial. http://www.xulplanet.com/, 2005.
18. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. A Browser Plug-in Solution to the Unique Password Problem. http://crypto.stanford.edu/ PwdHash/, 2005.
19. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger Password Authentication Using Browser Extensions. In 14th Usenix Security Symposium, 2005.
20. F. Schneider, N. Provos, R. Moll, M. Chew, and B. Rakowski. Phishing Protection Design Documentation. http://wiki.mozilla.org/Phishing_ Protection:_Design_Documentation, 2007.
21. SpoofGuard. Client-side defense against webbased identity theft. http://crypto.stanford.edu/SpoofGuard/, 2005.
22. URoulette. Home Page. http://www.uroulette.com, 2007.
23. W3C. Document Object Model. http://www.w3.org/TR/2004/REC-DOM-Level-3- Core-20040407/core.html, 2007.
24. L. Wenyin, G. Huang, L. Xiaoyue, Z. Min, and X. Deng. Detection of phishing webpages based on visual similarity. In 14th International Conference on World Wide Web (WWW): Special Interest Tracks and Posters, 2005.
25. Yahoo. Yahoo! AntiSpam Resource Center. http://antispam.yahoo.com/ domainkeys, 2007.