The consequence of non-cooperation in the fight against phishing

eCrime Researchers Summit, eCrime 2008

Volumn , Issue , 2008, Pages

  Moore, Tyler ^a   Clayton, Richard ^b  

^a HARVARD UNIVERSITY   (United States)

^b UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ANTI VIRUS; DATA SHARING; DOMAIN NAMES; MULTIPLE SOURCE; PHISHING; PHISHING ATTACKS;

WORLD WIDE WEB;

INFORMATION DISSEMINATION;

EID: 67249096586     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ECRIME.2008.4696968     Document Type: Conference Paper

References (26)

1. B. Violino, "After phishing? Pharming!," CSO Magazine, October 2005, http://www.csoonline.com/read/100105/pharm.html.
2. T. Moore and R. Clayton, "Examining the impact of website take-down on phishing," in Anti-Phishing Working Group eCrime Researcher's Summit (APWG eCrime), 2007, pp. 1-13.
3. Cyveillance Inc., "Cyveillance anti-phishing datasheet," 2007, http://www.cyveillance.com/web/docs/AntiPhishing.pdf.
4. InternetIdentity Inc., "PowerShark phishing site deactivation," 2008, http://www.internetidentity.com/phishing-site-takedown.html.
5. R. Weaver and M. Collins, "Fishing for phishes: applying capture-recapture to phishing," in Anti-Phishing Working Group eCrime Researcher's Summit (APWG eCrime), 2007, pp. 14-25.
6. T. Moore and R. Clayton, "Evaluating the wisdom of crowds in assessing phishing websites," in 12th International Financial Cryptography and Data Security Conference (FC08), Springer Lecture Notes on Computer Science (LNCS), vol. 5143, 2008, pp. 16-30.
7. R. McMillan, 'Rock Phish' blamed for surge in phishing," InfoWorld, 12 December 2006, http://www.infoworld.com/article/06/12/12/HNrockphish 1.html.
8. Honeynet Project and Research Alliance, "Know your enemy: fast-flux service networks, an ever changing enemy," July 2007, http://www. honeynet.org/papers/ff/fast-flux.pdf.
9. T. Moore and R. Clayton, "Evil Searching: compromise and recompromise of Internet hosts for phishing," in submission, 2008.
10. Gartner Inc., "Gartner says number of phishing e-mails sent to U.S. adults nearly doubles in just two years," Press Release, 9 November 2006, http://www.gartner.com/it/page.jsp?id=498245.
11. D. Florêncio and C. Herley, "Evaluating a trial deployment of password re-use for phishing prevention," in Anti-Phishing Working Group eCrime Researcher's Summit (APWG eCrime), 2007, pp. 26-36.
12. H. Varian, "System reliability and free riding," in Economics of Information Security, Vol. 12, Advances in Information Security, L. J. Camp and S. Lewis, Eds. Boston: Kluwer Academic Publishers, 2004, pp. 1-15.
13. M. Hypponen (private communication), 23 April 2008.
14. R. Lemos, "Anti-virus groups fight over Crossover sharing," The Register, 6 March 2006, http://www.theregister.co.uk/2006/03/06/crossover ruling angers industry/.
15. B. Krebs, "Defcon speakers team up to fight 'queen bots'," Washington Post, 9 August 2006, http://blog.washingtonpost.com/securityfix/2006/ 08/defcon speakers team up to fig.html.
16. Security Focus Inc., "Bugtraq mailing list," http://www.securityfocus. com/archive/1.
17. A. Arora, R. Krishnan, R. Telang and Y. Yang, "An empirical analysis of vendor response to disclosure policy," in Workshop on the Economics of Information Security (WEIS), 2005.
18. K. Kannan and R. Telang, "Market for software vulnerabilities? Think again," Management Science, vol. 51, no. 5, 2005, pp. 726-740.
19. E. Montelbano, "Mozilla: Firefox antiphishing tool better than IE 7," InfoWorld, 15 November 2006, http://www.infoworld.com/article/06/11/15/ HNmozillaphishing 1.html.
20. Y. Zhang, S. Egelman, L. F. Cranor and J. Hong, "Phinding phish: evaluating anti-phishing tools," in Proceedings of the 14th Annual Network & Distributed System Security Symposium (NDSS), 2007.
21. M. Jakobsson and S. Myers, Eds., Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft. New York: Wiley, 2006.
22. S. Gordon and R. Ford, "When worlds collide: information sharing for the security and anti-virus communities," IBM research paper, 1999.
23. R. Dacey, "Information security: Progress made, but challenges remain to protect federal systems and the nation's critical infrastructures, " US General Accounting Office (GAO), GAO-03-564T, April 2003, pp. 1-75.
24. L. Gordon, M. Loeb and W. Lucyshyn, "Sharing information on computer systems security: An economic analysis," Journal of Accounting and Public Policy, vol. 22, no. 6, 2003, pp. 461-485.
25. E. Gal-Or and A. Ghose, "The economic incentives for sharing security information," Information Systems Research, vol. 16, no. 2, 2005, pp. 186-208.
26. J. Hirshleifer, "From weakest-link to best-shot: the voluntary provision of public goods," Public Choice, vol. 41, 1983, pp. 371-386.