Bypassing security toolbars and phishing filters via DNS poisoning

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2008, Pages 2001-2006

  Abu Nimeh, Saeed ^a   Nair, Suku ^a  

^a Southern Methodist University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MISLEADING INFORMATIONS; PHISHING; PHISHING ATTACKS; TOOLBARS;

WEB BROWSERS;

INTERNET PROTOCOLS;

EID: 67249129190     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2008.ECP.386     Document Type: Conference Paper

References (16)

1. Anti-Phishing Working Group, 2007. [Online]. Available: http://www.antiphishing.org/
2. A. Tsow, M. Jakobsson, L. Yang, and S. Wetzel, "Warkitting: the drive-by subversion of wireless home routers," The Journal of Digital Forensic Practice, 2006. [Online]. Available: http://www.indiana.edu/ phishing/papers/warkit.pdf
3. S. Stamm, Z. Ramzan, and M. Jakobsson, "Drive-by pharming," Symantec Inc., Tech. Rep., 2006.
4. J. E. Canavan, The Fundamentals of Network Security. Artech House Publishers, 2001.
5. M. Wu, R. C. Miller, and S. L. Garfinkel, "Do security toolbars actually prevent phishing attacks?" in Proceedings of the SIGCHI conference on Human Factors in computing systems, 2006.
6. L. F. Cranor, S. Egelman, J. Hong, and Y. Zhang, "Phinding phish: An evaluation of anti-phishing toolbars," CMU, Tech. Rep., 2006.
7. Netcraft. [Online]. Available: http://toolbar.netcraft.com/
8. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. C. Mitchell, "Client-side defense against web-based identity theft," in 11th Annual Network and Distributed System Security Symposium (NDSS '04), 2004.
9. SpoofStick. [Online]. Available: http://www.spoofstick.com
10. Google Toolbar. [Online]. Available: http://toolbar.google.com/
11. Internet Explorer. [Online]. Available: http://www.microsoft.com/windows/ products/winfamily/ie/default.mspx
12. Firefox. [Online]. Available: http://getfirefox.com
13. Opera. [Online]. Available: http://www.opera.org
14. Wireshark. [Online]. Available: http://www.wireshark.org
15. Principles behind IE7's Phishing Filter. [Online]. Available: http://blogs.msdn.com/ie/archive/2005/08/31/458663.aspx
16. Open DNS. [Online]. Available: http://addiator.blogspot.com/2007/09/ opendns-and-anti-phishing.html