New filtering approaches for phishing email

Journal of Computer Security

Volumn 18, Issue 1, 2010, Pages 7-35

  Bergholz, André ^a   De Beer, Jan ^b   Glahn, Sebastian ^a   Moens, Marie Francine ^b   Paaß, Gerhard ^a   Strobel, Siehyun ^a  

^a FRAUNHOFER IAIS   (Germany)

^b UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Email filtering; Phishing; Text mining

Indexed keywords

AUTHENTICATION PROTOCOLS; COMMUNICATION SECURITY; CONFIDENTIAL INFORMATION; CONTENT BASED FILTERING; CONTENT-BASED; EMAIL FILTERING; EMPIRICAL EVALUATIONS; FINANCIAL INSTITUTION; GLOBAL SECURITY; PHISHING; PRIVATE INFORMATION; SEQUENTIAL ANALYSIS; STATISTICAL CLASSIFIER; STATISTICAL MODELS; TEXT MINING; TRAINING SETS;

CLASSIFICATION (OF INFORMATION); CLASSIFIERS; INTERNET; LEARNING SYSTEMS; NETWORK SECURITY; SPAMMING;

ELECTRONIC MAIL;

EID: 71749098791     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2010-0371     Document Type: Article

References (45)

1. S. Abu-Nimeh, D. Nappa, X. Wang and S. Nair, A comparison of machine learning techniques for phishing detection, in: Proceedings of the eCrime Researchers Summit, Pittsburgh, PA, USA, 2007, pp. 60-69.
2. Anti-Phishing Working Group, Phishing activity trends - report for the month of December 2007, 2008. http://www.antiphishing.org/reports/apwg-report- oct-2007.pdf, accessed on 28.04.08.
3. Bank Austria, Faq mobile TAN, 2008; http://www.bankaustria.at/de/19825. html, accessed on 25.01.08.
4. A. Bergholz, J.-H. Chang, G. Paaß, F. Reichartz and S. Strobel, Improved phishing detection using model-based features, in: Proceedings of the Conference on Email and Anti-Spam (CEAS),Mountain View, CA, USA, 2008.
5. B. Biggio, G. Fumera, I. Pillai and F. Roli, Image spam filtering using visual information, in: ICIAP '07: Proceedings of the 14th International Conference on Image Analysis and Processing, IEEE Computer Society, Washington, DC, USA, 2007, pp. 105-110.
6. D.M. Blei, A.Y. Ng and M.I. Jordan, Latent Dirichlet allocation, Journal of Machine Learning Research 3 (2003), 993-1022.
7. A. Bratko, G.V. Cormack, B. Filipic, T.R. Lynam and B. Zupan, Spam filtering using statistical data compression models, Journal of Machine Learning Research 6 (2006), 2673-2698.
8. L. Breiman, Random forests, Machine Learning 45(1) (2001), 5-32.
9. B. Byun, C.-H. Lee, S. Webb and C. Pu, A discriminative classifier learning approach to image modeling and spam image identification, in: CEAS 2007 Fourth Conference on Email and Anti- Spam, August 2-3, 2007, Mountain View, CA, USA, 2007.
10. R. Cattoni, T. Coianiz, S. Messelodi and C. Modena, Geometric layout analysis techniques for document image understanding: A review, Technical report, IRST, Trento, Italy, 1998.
11. M. Chandrasekaran, K. Narayanan and S. Upadhyaya, Phishing email detection based on structural properties, in: Proceedings of the NYS Cyber Security Conference, 2006.
12. Commtouch, Commtouch q3 spam statistics: Spam problem reaches new peak, expands in every dimension, 2008; http://www.commtouch.com/Site/News-Events/pr- content.asp?news-id=767&cat-id=1, accessed on 11.05.08.
13. G.V. Cormack and R.N. Horspool, Data compression using dynamic Markov modelling, The Computer Journal 30(6) (1987), 541-550.
14. R. Dhamija, J.D. Tygar and M. Hearst, Why phishing works. in: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Montreal, Canada, 2006, pp. 581-590.
15. A. Emigh, Phishing attacks: Information flow and chokepoints, in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 31-64.
16. I. Fette, N. Sadeh and A. Tomasic, Learning to detect phishing emails, Technical Report CMU-ISRI- 06-112, School of Computer Science, Carnegie Mellon University, 2006.
17. I. Fette, N. Sadeh and A. Tomasic, Learning to detect phishing emails, in: Proceedings of the International World Wide Web Conference (WWW), Banff, Canada, 2007, pp. 649-656.
18. G. Fumera, I. Pillai and F. Roli, Spam filtering based on the analysis of text information embedded into images, Journal of Machine Learning Research 7 (2006), 2699-2720.
19. Gartner, Gartner survey shows phishing attacks escalated in 2007; more than $3 billion lost to these attacks, 2007; http://allpaynews.com/node/ 3820, retrieved on April 27th, 2008.
20. J. Goodman, G.V. Cormack and D. Heckerman, Spam and the ongoing battle for the inbox, Communications of the ACM 50 (2007), 25-33.
21. M. Gupta, Spoofing and coutermeasures, in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 65-104.
22. S.C.H. Hoi, R. Jin and M.R. Lyu, Large-scale text categorization by batch mode active learning, in: Proceedings of the 15th international conference on World Wide Web, Edinburgh, Scotland, UK, 2006, pp. 633-642.
23. S. Impedovo, L. Ottaviano and S. Occhinegro, Optical character recognition - a survey, ACM International Journal of Pattern Recognition and Artificial Intelligence 5 (1991), 1-24.
24. A.K. Jain, M.N. Murty and P.J. Flynn, Data clustering: A review, ACM Computing Surveys 31 (1999), 264-323.
25. M. Jakobsson and A. Tsow, Making takedown difficult, in: Phishing and Countermeasures, M. Jakobsson and Steven, eds, Wiley, 2007, pp. 461-467.
26. G.H. John, Enhancements to the data mining process, PhD thesis, Stanford University, CA, USA, 1997.
27. R. Kohavi and G. John, Wrappers for feature subset selection, AI Journal 97(1,2) (1997), 273-324.
28. I. Konya, C. Seibert, S. Glahn and S. Eickeler, A robust front page detection algorithm for large periodical collection, in: Proceedings of the International Conference on Pattern Recognition (ICPR), Tampa, FL, USA, 2008, pp. 1-5.
29. Y. Marton, N. Wu and L. Hellerstein, On compression-based text classification, in: Proceedings of the European Colloquium on IR Research (ECIR), Santiago de Compostela, Spain, 2005, pp. 300- 314.
30. T.P. Minka, Estimating a Dirichlet distribution, Technical report, Microsoft Research, 2003.
31. D. Miyamoto, H. Hazeyama and Y. Kadobayashi, A proposal of the AdaBoost-based detection of phishing sites, in: Proceedings of the Joint Workshop on Information Security, 2007.
32. Mozilla, Phishing protection, 2007; http://www.mozilla.com/en-US/firefox/ phishing-protection/; accessed on 23.10.07.
33. S. Myers, Introduction to phishing, in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 1-29.
34. P. Robichaux and D.L. Ganger, Gone phishing: Evaluating anti-phishing tools for windows, Technical report, 3Sharp LLC, September 2006.
35. J.L. Scarrow, Microsoft's anti-phishing technologies and tactics, in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 551-562.
36. F. Sebastiani, Machine learning in automated text categorization, ACM Computing Surveys 34 (2002), 1-47.
37. M. Stepp and C. Collberg, Browser-based antiphishing tools, in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 493-513.
38. S. Thrun et al., The MONK's problems: A performance comparison of different learning algorithms, Technical Report CMU-CS-91-197, Carnegie Mellon University, Pittsburgh, PA, 1991.
39. V. Vapnik, The Nature of Statistical Learning Theory, Springer, New York, 1995.
40. P. Viola and M. Jones, Rapid object detection using a boosted cascade of simple features, in: Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition (CVPR), Kauai, HI, USA, 2001, pp. 511-518.
41. Z. Wang, W. Josephson, Q. Lv, M. Charikar and K. Li, Filtering image spam with near-duplicate detection, in: CEAS 2007 Fourth Conference on Email and Anti-Spam, August 2-3, 2007, Mountain View, CA, USA, 2007.
42. M. Wu, R. Miller and S. Garfinkel, Do toolbars actually prevent phishing? in: Phishing and Countermeasures, M. Jakobsson and S. Myers, eds, Wiley, 2007, pp. 514-521.
43. C. Zahn, Graph-theoretical methods for detecting and describing gestalt clusters, IEEE Transactions on Computers 20 (1971), 68-86.
44. Y. Zhang, J. Hong and L. Cranor, Cantina: A content-based approach to detecting phishing web sites, in: Proceedings of the International World Wide Web Conference (WWW), Banff, Canada, 2007, pp. 639-648.
45. G. Zhu and D. Doermann, Automatic document logo detection, in: Ninth International Conference on Document Analysis and Recognition, 2007, Curitiba, Parana, Brazil, Vol.2, 2007, pp. 864-868.