User behaviour based phishing websites detection

Proceedings of the International Multiconference on Computer Science and Information Technology, IMCSIT 2008

Volumn 3, Issue , 2008, Pages 783-790

  Dong, Xun ^a   Clark, John A ^a   Jacob, Jeremy L ^a  

^a UNIVERSITY OF YORK   (United Kingdom)

Author keywords

Identity theft; Phishing attacks; Phishing websites detection; User protection

Indexed keywords

ANALYSIS OF DATA; DATA USERS; DETECTION SYSTEM; IDENTITY THEFT; PHISHERS; PHISHING; PHISHING ATTACKS; PHISHING WEBSITES DETECTION; USER BEHAVIOUR; USER PROTECTION;

COMPUTER SCIENCE; INFORMATION TECHNOLOGY;

WORLD WIDE WEB;

EID: 70349323626     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMCSIT.2008.4747332     Document Type: Conference Paper

References (41)

1. http://home.versatel.nl/MAvanEverdingen/Code/.
2. Spamassassin's official website. http://spamassassin.apache.org/.
3. Anti-phishing work group home page, 2007. http://www.antiphishing.org/.
4. C. Abad. The economy of phishing: A survey of the operations of the phishing market. First Monday, 10(9), 2005.
5. K. Albrecht, N. Burri, and R. Wattenhofer. Spamato-An Extendable Spam Filter System. In 2nd Conference on Email and Anti-Spam (CEAS), Stanford University, Palo Alto, California, USA, July 2005.
6. P. Behera and N. Agarwal. A confidence model for web browsing. In Toward a More Secure Web-W3C Workshop on Transparency and Usability of Web Authentication, 2006.
7. M. Chandrasekaran, R. Chinchain, and S. Upadhyaya. Mimicking user response to prevent phishing attacks. In IEEE International Symposium on a World of Wireless, Mobile, and Multimedia networks, 2006.
8. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. C. Mitchell. Client-side defense against web-based identity theft. In NDSS '04: Proceedings of the 11th Annual Network and Distributed System Security Symposium, February 2004.
9. R. Dhamija, D. Tygar, and M. Hearst. Why phishing works. CHI '06: Proceedings of the SIGCHI conference on Human Factors in computing systems, ACM Special Interest Group on Computer-Human Interaction:581-590, 2006.
10. X. Dong, J. A. Clark, and J. Jacob. A user-phishing interaction model. In Conference on Human System Interaction, 2008.
11. I. Fette, N. Sadeh, and A. Tomasic. Learning to detect phishing emails. In WWW '07: Proceedings of the 16th international conference on World Wide Web, pages 649-656, New York, NY, USA, 2007. ACM Press.
12. D. Florencio and C. Herley. A large-scale study of web password habits. In WWW '07: Proceedings of the 16th international conference on World Wide Web, pages 657-666, New York, NY, USA, 2007. ACM Press.
13. R. Franco. Better website identification and extended validation certifi-cates in ie7 and other browsers. IEBlog, November 2005.
14. B. Goodger, I. Hickson, D. Hyatt, and C. Waterson. Xml user interface language (xul) 1.0. Technical report, Mozilla Org., 2001.
15. S. Hartman. Ietf-draft: Requirements for web authentication resistant to phishing. Technical report, MIT, 2007.
16. B. Hhrmann, P. L. Hgaret, and T. Pixley. Document object model events. Technical report, W3C, 2007.
17. T. Jagatic, N. Johnson, M. Jakobsson, and F. Menczer. Social phishing. ACM Communication, October 2007.
18. M. Jakobsson. Modeling and preventing phishing attacks. In Phishing Panel in Financial Cryptography '05, 2005.
19. M. Jakobsson. Human factors in phishing. Privacy & Security of Consumer Information '07, 2007.
20. M. Jakobsson, A. Tsow, A. Shah, E. Blevis, and Y.-K. Lim. What instills trust? a qualitative study of phishing. In Extended abstract, USEC '07, 2007.
21. P. A. Johnston. *http://pajhome.org.uk/crypt/index.html.
22. A. Litan. Toolkit: E-commerce loses big because of security concerns. Technical report, Garnter Research, 2006.
23. T. McCall. Gartner survey shows phishing attacks escalated in 2007; more than $3 billion lost to these attacks. Technical report, Gartner Research, 2007.
24. Microsoft. Anti-phishing white paper. Technical report, Microsoft, 2005.
25. MillerSmiles. Official website. http://www.millersmiles.co.uk.
26. T. Moore and R. Clayton. Examining the impact of website take-down on phishing. In eCrime '07: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit, pages 1-13, New York, NY, USA, 2007. ACM.
27. Mozilla. Phishing protection, 2007. http://www.mozilla.com/en-US/firefox/ phishing-protection/.
28. Netcraft, 2007. *http://toolbar.netcraft.com/.
29. G. Ollmann. The phishing guide. Technical report, NGSS.
30. G. Ollmann. The pharming guide. Technical report, Next Generation Security Software Ltd., 2005.
31. Y. Pan and X. Ding. Anomaly based web phishing page detection. acsac, 0:381-392, 2006.
32. Phishtank, 2007. http://www.phishtank.com/.
33. S. Schechter, R. Dhamija, A. Ozment, and I. Fischer. The emperor's new security indicators: An evaluation of website authentication and the effect of role playing on usability studies. In 2007 IEEE Symposium on Security and Privacy, 2007.
34. R. Security. Enhancing one-time passwords for protection against real-time phishing attacks. Technical report, RSA, 2007.
35. G. Staikos. Web browser developers work together on security. Web, November 2005.
36. A. van Kesteren. The xmlhttprequest objec. Technical report, W3C, 2006.
37. W3C. Web security context-working group charter. Web, 2006.
38. D. Watson, T. Holz, and S. Mueller. Know your enemy: Phishing. Technical report, The Honeynet Project & Research Alliance, 2005.
39. M. Wu, R. C. Miller, and S. L. Garfinkel. Do security toolbars actually prevent phishing attacks? In CHI '06: Proceedings of the SIGCHI conference on Human Factors in computing systems, pages 601-610, New York, NY, USA, 2006. ACM Press.
40. M. Wu, R. C. Miller, and G. Little. Web wallet: Preventing phishing attacks by revealing user intentions. pages 102-113, 2006.
41. Y. Zhang, J. I. Hong, and L. F. Cranor. Cantina: A content-based approach to detecting phishing web sites. In WWW '07: Proceedings of the 16th international conference on World Wide Web, pages 639-648, New York, NY, USA, 2007. ACM Press.