Countermeasure techniques for deceptive phishing attack

Proceedings - 2009 International Conference on New Trends in Information and Service Science, NISS 2009

Volumn , Issue , 2009, Pages 636-641

  Huang, Huajun ^a   Tan, Junshan ^a   Liu, Lingxi ^a  

^a University of Forestry and Technology   (China)

Author keywords

Anti phishing; Deceptive; Identity theft; Phishing

Indexed keywords

ANTI-PHISHING; CREDIT CARDS; DECEPTIVE; FINANCIAL ACCOUNTS; FINANCIAL DATA; IDENTITY THEFT; ONLINE IDENTITY; PERSONAL IDENTITY; PHISHERS; PHISHING; PHISHING ATTACKS; SOCIAL ENGINEERING; SOCIAL SECURITY NUMBERS;

ELECTRONIC MAIL;

EID: 70449573111     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NISS.2009.80     Document Type: Conference Paper

References (36)

1. Anti-Phishing Working Group. http://www.antiphishing.org/, 2009.
2. Gartner Survey. Gartner Survey Shows Phishing Attacks Escalated in 2007. http://www.gartner.com/it/page.jsp?id=565125, 2008.
3. M. Jakobsson, and A. Young, "Distributed Phishing Attacks", http://eprint.iacr.org/2005/091.pdf, 2008.
4. T. Jagatic, N. Johnson, and M. Jakobsson, et al, "Social Phishing", Communication of the ACM, 2007, Vol.50, No. 10, pp.94-100.
5. Sophos. Do-it-yourself Phishing Kits Found on the Internet. http://www.sophos.com/pressoffice/news/articles/2004/08/sa-diyphising.html, 2008.
6. P. Mutton. Italian Bank's XSS Opportunity Seized by Fraudsters. http://news.netcran.com/archives/2008/01/08/italian-bank-xss-opportunity-seized- by-fraudsters.html, 2008.
7. SSAC, "Registrar Impersonation Phishing Attacks", http://www.icann.org/en/committees/security/sac028.pdf, 2008.
8. Microsoft, "Sender ID Home Page", http://www.microsoft.com/ mscorp/safety/tehnologies/senderid/default.aspx, 2009.
9. Yahoo, "Yahoo AntiSpam Resource Center", http://antispam.yahoo. com/domainkeys, 2009.
10. T. Moore, and R. Clayton, "The Consequence of Non-Cooperation in the Fight against Phishing", In: Proc. of the Third APWG eCrime Researchers Summit, 2008, pp. 1-14.
11. T. Moore, and R. Clayton, "Evaluating the Wisdom of Crowds in Assessing Phishing Websites", In: Proc. of the 12th International Financial Cryptography and Data Security Conference, 2008, pp. 16-30.
12. Microsoft, "Internet Explore 7", http://www.microsoft.com/ china/windows/products/winfamily/ie/default.mspx, 2008.
13. F. Schneider, N. Provos, and R. Moll, et al, "Phishing Protection Design Documentation", http://wiki.mozilla.org/, 2008.
14. Bay, "EBay tool bar", http://pages.ebay.com/ebaytoolbar/, 2008.
15. NetCraft, "Netcraft anti-phishing tool bar", http://toolbar.netcraft.com/, 2009.
16. R. Dhamija, and J. D. Tygar, "The Battle against phishing: Dynamic Security Skins", In: Proc. of ACM Symposium on Usable Security and Privacy, 2005, pp.77-88.
17. R. Dhamija, J. D. Tygar, and M. Hearst, "Why Phishing Works?", In: Proc. of the SIGCHI conference on Human Factors in computing systems, 2006, pp.581-590.
18. E. Medved, E. Kirda, and C. Kruegel, "Visual-Similarity-Based Phishing Detection", In: Proc. of the 4th International Conference on Security and Privacy in Communication Networks, 2008, pp.234-245.
19. M. Topkara, A. Kamra, and M. J. Atallah, et al, "ViWiD: Visible Watermarking Based Defense against Phishing", Lecture Notes in Computer Science, Vol.3710, 2005, pp.470-483.
20. A. Y. Fu, W. Y. Liu, and X. T. Deng, "Detecting Phishing Web Pages with Visual Similarity Assessment Based on Earth Mover's Distance (EMD)". IEEE Transactions on Dependable and Secure Computing, Vol.3, No.4,2006, pp.301-311.
21. N. Chou, R. Ledesma, and Y. Teraguchi, et al, "Client-side Defense against Web-based Identify Theft", In: Proc. of 11th Annual Network and Distributed System Security Symposium, 2004, pp.1-16.
22. W Y. Liu, X. T. Deng, and G. L. Huang, et al, "An Antiphishing Strategy Based on Visual Similarity Assessment", IEEE Internet Computing, 2006, Vol.10, pp.58-65.
23. S. Garera, N. Provos, and M. Chew, et al, "A Framework for Detection and Measurement of Phishing Attacks", In: Proc. of the 5th ACM Workshop on Recurring Malcode, 2007, pp. 1-8.
24. Y. Pan, and X. H. Ding, "Anomaly Based Web Phishing Page Detection", In: Proc. of the 22nd Annual Computer Security Applications Conference on Annual Computer Security Applications Conference, 2006, pp.381-392.
25. B. Ross, C. Jackson, and N. Miyake, "Stronger Password Authentication Using Browser Extensions", In: Proc. of the 14th Usenix Security Symposium, 2005, pp.2-16.
26. E. Kirda, and C. Kruegel, "Protecting Users against Phishing Attacks with AntiPhish", In: Proc. of the 29th Annual International Computer Software and Applications Conference, 2005, pp.521-534.
27. A. P. E. Rosiello, and E. Kirda, et al, "A Layout-Similarity-Based Approach for Detecting Phishing Pages", In: Proc. of the third International Conference on Security and Privacy in Communications Networks, 2007, pp.454-463.
28. Y. Zhang, J. Hong, and L. F. Cranor, "CANTINA: A Content-Based Approach to Detecting Phishing Web Sites", In: Proc. of the 16th International World Wide Web Conference, 2007, pp.639-648.
29. S. Sheng, B. Magnien, and P. Kumaraguru, et al, "Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish". In: Proc. of the 2007 Symposium on Usable Privacy and Security, 2007, pp.88-99.
30. P. Kumaraguru, and S. Sheng, "Acquisti, et al. Lessons from a Real World Evaluation of Anti-phishing Training", eCrime Researchers Summit, 2008, pp. 1-12.
31. S. Srikwan, and M. Jakobsson, "Using Cartoons to Teach Internet Security", Cryptologia, 2008, Vol. 32, No. 2, pp. 137-154.
32. J. S. Downs, M. Holbrook, and L. F. Cranor, "Behavioral Response to Phishing Risk", In: Proc. of the 2nd Annual eCrime Researchers, 2007, pp.3 7-44.
33. C. Ludl, S. McAllister, and E. Kirda, et al, "On the Effectiveness of Techniques to Detect Phishing Sites", In: Proc. of Detection of Intrusions and Malware and Vulnerability Assessment, 2007, pp.20-39.
34. M. Wu, R. C. Miller, and S. L. Garfinkel, "Do Security Toolbars Actually Prevent Phishing Attacks?", In: Proc. of the SIGCHI Conference on Human Factors in Computing Systems, 2006, pp.601-610.
35. S. Egelman, L. F. Cranor, and J. Hong, "You've Been Warned: An Empirical Study of the Effectiveness of Web Browser Phishing Warnings". In: Proc. of the 26th annual SIGCHI Conference on Human Factors in Computing Systems, 2008, pp. 1065-1074.
36. P. Finn, and M. Jakobsson, "Designing and Conducting Phishing Experiments", IEEE Technology and Society Magazine, Special Issue on Usability and Security, 2007, pp.1-21.