Evil searching: Compromise and recompromise of internet hosts for phishing

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5628 LNCS, Issue , 2009, Pages 256-272

  Moore, Tyler ^a   Clayton, Richard ^b  

^a HARVARD UNIVERSITY   (United States)

^b UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EMPIRICAL EVIDENCE; INTERNET HOSTS; MALWARES; PHISHING; ROOT CAUSE; SEARCH TERMS; TECHNIQUES USED; WEB SEARCHES; WEB SERVERS;

COMPUTER CRIME; CRYPTOGRAPHY; INFORMATION RETRIEVAL; SEARCH ENGINES; WEB SERVICES; WEBSITES;

INTERNET;

EID: 70350398962     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-03549-4_16     Document Type: Conference Paper

References (28)

1. Anderson, R., Böhme, R., Clayton, R., Moore, T.: Security economics and the internal market. European Network and Information Security Agency (ENISA) (2008), http://enisa.europa.eu/doc/pdf/report-sec-econ-&-int-mark- 20080131.pdf
2. Anderson, R., Moore, T.: The economics of information security. Science 314 (5799), 610-613 (2006)
3. Anti-Phishing Working Group, http://www.apwg.org/
4. Artists Against 419, http://www.aa419.org/
5. Collins, M.P., Shimeall, T.J., Faber, S., Janies, J., Weaver, R., De Shon, M., Kadane, J.: Using uncleanliness to predict future botnet addresses. In: Proceedings of the ACM SIGCOMM Conference on Internet Measurement (IMC), pp. 93-104. ACM Press, New York (2007)
6. Cult of the Dead Cow. Goolag Scanner Specifications (January 2008), http://goolag.org/specifications.html
7. Damron, J.: Identifiable fingerprints in network applications. USENIX; login 28(6), 16-20 (2003)
8. Dausin, M.: PHP File Include Attacks. Tipping Point (February 2008), http://dvlabs.tippingpoint.com/blog/2008/02
9. Day, O., Palmen, B., Greenstadt, R.: Reinterpreting the disclosure debate for web infections. In: 7th Workshop on the Economics of Information Security (WEIS) (2008)
10. Franklin, J., Paxson, V., Perrig, A., Savage, S.: An inquiry into the nature and causes of the wealth of Internet miscreants. In: Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS), pp. 375-388 (2007)
11. Google Hacking Database, http://johnny.ihackstuff.com/ghdb.php
12. Google Safe Browsing API, http://code.google.com/apis/safebrowsing/
13. Higgins, K.J.: Phishers Enlist Google 'Dorks'. DarkReading (March 2008), http://www.darkreading.com/document.asp?doc-id=149324
14. LaCour, J.: Personal communication, March 28 (2008)
15. Lancor, L., Workman, R.: Using Google hacking to enhance defense strategies. In: Proceedings of the 38th SIGCSE Technical Symposium on Computer Science Education, pp. 491-495 (2007)
16. Long, J.: Google Hacking Mini-Guide. informIT (May 2004), http://www.informit.com/articles/article.aspx?p=170880
17. Mavrommatis, P.: Malware Reviews via Webmaster Tools (August 2007), http://googlewebmastercentral.blogspot.com/2007/08/malware-reviews-via- webmaster-tools.html
18. McAfee Inc. SiteAdvisor, http://www.siteadvisor.com
19. Moore, T., Clayton, R.: Examining the impact of website take-down on phishing. In: Anti-Phishing Working Group eCrime Researcher's Summit (APWG eCrime), pp. 1-13. ACM Press, New York (2007)
20. Netcraft Inc. March 2008 Web Server Survey (2008), http://news.netcraft. com/archives/web-server-survey.html
21. PhishTank, http://www.phishtank.com/
22. Provos, N., Mavrommatis, P., Rajab, M., Monrose, F.: All your iFrames point to us. In: 17th USENIX Security Symposium, pp. 1-15 (2008)
23. Stop Badware, http://www.stopbadware.org/
24. The Webalizer, http://www.mrunix.net/webalizer/
25. Thomas, R., Martin, J.: The underground economy: priceless. USENIX; login 31(6), 7-16 (2006)
26. Watson, D., Holz, T., Mueller, S.: Know your Enemy: Phishing. The Honeynet Project & Research Alliance (May 2005), http://www.honeynet.org/ papers/phishing/
27. Weaver, R., Collins, M.P.: Fishing for phishes: applying capture-recapture methods to estimate phishing populations. In: Anti-Phishing Working Group eCrime Researcher's Summit (APWG eCrime), pp. 14-25. ACM Press, New York (2007)
28. Yahoo! Inc. Yahoo! Search Web Services, http://developer.yahoo.com/ search/