Fighting phishing with trusted email

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 462-467

  Crain, Jordan ^a   Opyrchal, Lukasz ^a   Prakash, Atul ^b  

^a MIAMI UNIVERSITY   (United States)

^b UNIVERSITY OF MICHIGAN   (United States)

Author keywords

Email; Phishing; Privacy; Spam

Indexed keywords

EMAIL CLIENTS; PERSONAL INFORMATION; PHISHING; PHISHING ATTACKS; PLUG-INS; SOCIAL ENGINEERING;

ELECTRONIC MAIL; INTERNET; WORLD WIDE WEB;

INFORMATION DISSEMINATION;

EID: 77952390965     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.98     Document Type: Conference Paper

References (18)

1. "Anti-Phishing Working Group," www.antiphishing.org.
2. T. McCall, "Gartner survey shows phishing attacks escalated in 2007; more than $3 billion lost to these attacks," www.gartner.com/it/ page.jsp?id=565125.
3. R. Dhamija, J. D. Tygar, and M. Hearst, "Why Phishing Works," in Proceedings of CHI 2006, Montreal, Canada, April 2006, pp. 581-590.
4. J. Downs, M. Holbrook, and L. Cranor, "Decision Strategies and Susceptibility to Phishing," in Proceedings of the Second Symposium On Usable Privacy and Security (SOUPS), Pittsburgh, USA, July 2006, pp. 79-90.
5. D. Lazarus, "Phishing expedition at heart of AT&T hacking," in San Francisco Chronicle, September 1 2006, http://sfgate.com/cgi-bin/ article.cgi?f=/c/a/2006/09/01/BUGVBKSUIE1.DTL.
6. J. Klensin, "RFC 2821 - Simple Mail Transfer Protocol," April 2001, http://www.faqs.org/rfcs/rfc2821.html.
7. "Using eBay Toolbar's Account Guard," 2007, http://pages.ebay.com/help/confidence/account-guard.html.
8. "Google safe browsing for Firefox," 2007, http://www.google. com/tools/firefox/safebrowsing/.
9. "Internet Explorer," 2007, http://www.microsoft.com/windows/ie/ default.mspx.
10. "Firefox 2 phishing protection," 2007, http://www.mozilla.com/ en-US/firefox/phishing-protection/.
11. M. Wu, R. C. Miller, and S. L. Garfinkel, "Do security toolbars actually prevent phishing attacks?" in CHI '06: Proceedings of the SIGCHI conferences on Human Factors in computing system, ACM Special Interest Group on Computer-Human Interaction. New York, NY, USA: ACM Press, 2006, pp. 601-610.
12. "Phishing activity trends report," August 2006, http://www.antiphishing.org/reports/apwg-report-August-2006.pdf.
13. Y Zhang, S. Egelman, L. Cranor, and J. Hong, "Phinding phish: Evaluating anti-phishing tools," in Proceedings of the 14th Annual Network & Distributed Systems Security Symposium (NDSS 2007), San Diego, CA, February-March 2007.
14. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. C. Mitchell, "Client-side defense against web-based identity theft," in Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS '04), San Diego, CA, February 2004.
15. B. Adida, S. Hohenberger, and R. L. Rivest, "Fighting phishing attacks: a lightweight trust architecture for detecting spoofed emails," February 2005, draft.
16. M. Elkins, MIME Security with Pretty Good Privacy (PGP), October 1996, RFC 2015.
17. J. Galvin, S. Murphy, S. Crocker, and N. Freed, Security Multiparts for MIME: Multipart/Signed and Multipart/Encrypted, October 1995, RFC 1847.
18. J. Myers and M. Rose, Post Office Protocol - Version 3, May 1996, RFC 1939.