Visual-similarity-based phishing detection

Proceedings of the 4th International Conference on Security and Privacy in Communication Networks, SecureComm'08

Volumn , Issue , 2008, Pages

  Medvet, Eric ^a   Kirda, Engin ^b   Kruegel, Christopher ^c  

^a UNIVERSITY OF TRIESTE   (Italy)

^b EURECOM   (France)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Anti phishing; Security; Visual similarity; Web document analysis

Indexed keywords

ANTI-PHISHING; CREDIT CARDS; DATA SETS; EXPERIMENTAL EVALUATION; FALSE NEGATIVES; FALSE POSITIVE; NOVEL TECHNIQUES; ON-LINE BANKING; PHISHING; PHISHING ATTACKS; REAL-WORLD; SECURITY; SECURITY PROBLEMS; SENSITIVE INFORMATIONS; VISUAL APPEARANCE; VISUAL SIMILARITY; WEB DOCUMENT ANALYSIS; WEB PAGE;

MILITARY PHOTOGRAPHY;

WORLD WIDE WEB;

EID: 70249114141     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1460877.1460905     Document Type: Conference Paper

References (21)

1. APWG. Phishing Activity Trends - Report for the Month of December, 2007. Technical report, Anti Phishing Working Group, Jan. 2008. Available at http://www.antiphishing.org/reports/apwg-report-dec-2007.pdf.
2. H. Aradhye, G. Myers, and J. Herson. Image analysis for efficient categorization of image-based spam e-mail. Document Analysis and Recognition, 2005. Proceedings. Eighth International Conference on, 2:914-918, 29 Aug.-1 Sept. 2005.
3. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. Mitchell. Client-side defense against web-based identity theft. In 11th Annual Network and Distributed System Security Symposium (NDSS '04), San Diego, 2005.
4. R. Dhamija and J. D. Tygar. The battle against phishing: Dynamic security skins. In Proceedings of the 2005 symposium on Usable privacy and security, New York, NY, pages 77-88. ACM Press, 2005.
5. R. Dhamija, J. D. Tygar, and M. Hearst. Why Phishing Works. In Proceedings of the Conference on Human Factors In Computing Systems (CHI) 2006, Montreal, Canada. ACM Press, 2006.
6. E. Kirda and C. Kruegel. Protecting Users Against Phishing Attacks with AntiPhish. In COMPSAC '05: Proceedings of the 29th Annual International Computer Software and Applications Conference (COMPSAC'05) Volume 1, pages 517-524, Washington, DC, USA, 2005. IEEE Computer Society.
7. E. Kirda and C. Kruegel. Protecting Users against Phishing Attacks. The Computer Journal, 2006.
8. E. Medvet, E. Kirda, and C. Kruegel. Visual-Similarity-Based Phishing Detection. Technical Report, TR-iSecLab-0708-001, http://iseclab.org/papers/ visual-phishing-technical.pdf, 2008.
9. Microsoft. Sender ID Home Page. http://www.microsoft.com/mscorp/safety/ technologies/senderid/default.mspx, 2008.
10. P. Mutton. Italian Bank's XSS Opportunity Seized by Fraudsters. Technical report, Netcraft, Jan. 2008. Available at http://news.netcraft.com/archives/ 2008/01/08/italian-banks-xss-opportunity-seized-by-fraudsters.html.
11. NetCraft. Netcraft anti-phishing tool bar. http://toolbar.netcraft.com, 2007.
12. A. Rosiello, E. Kirda, C. Kruegel, and F. Ferrandi. A Layout-Similarity-Based Approach for Detecting Phishing Pages. In IEEE International Conference on Security and Privacy in Communication Networks (SecureComm), 2007.
13. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. A Browser Plug-In Solution to the Unique Password Problem. http://crypto.stanford.edu/ PwdHash/, 2005.
14. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger Password Authentication Using Browser Extensions. In 14th Usenix Security Symposium, 2005.
15. F. Schneider, N. Provos, R. Moll, M. Chew, and B. Rakowski. Phishing Protection Design Documentation. http://wiki.mozilla.org/Phishing-Protection:- Design-Documentation, 2007.
16. Sophos. Do-it-yourself phishing kits found on the internet, reveals Sophos. Technical report, Sophos, Aug. 2004. Available at http://www.sophos.com/ pressoffice/news/articles/2004/08/sa-diyphishing.html.
17. Spoof Guard. Client-side defense against web-based identity theft. http://crypto.stanford.edu/SpoofGuard/, 2005.
18. R. Stankovic and B. Falkowski. The Haar wavelet transform: its status and achievements. Computers and Electrical Engineering, 29:25-44, 2003.
19. Z. Wang, W. Josephson, Q. Lv, M. Charikar, and K. Li. Filtering Image Spam with Near-Duplicate Detection. Proceedings of CEAS 2007: Fourth Conference on Email and Anti-Spam, Aug., 2007.
20. L. Wenyin, G. Huang, L. Xiaoyue, Z. Min, and X. Deng. Detection of phishing webpages based on visual similarity. In 14th International Conference on World Wide Web (WWW): Special Interest Tracks and Posters, 2005.
21. Yahoo. Yahoo! AntiSpam Resource Center. http://antispam.yahoo.com/ domainkeys, 2008.