A hybrid phish detection approach by identity discovery and keywords retrieval

WWW'09 - Proceedings of the 18th International World Wide Web Conference

Volumn , Issue , 2009, Pages 571-580

  Xiang, Guang ^a   Hong, Jason I ^a  

^a Carnegie Mellon University   (United States)

Author keywords

Anti phishing; Information retrieval; Named entity recognition

Indexed keywords

ANTI-PHISHING; DATA SOURCE; DETECTION APPROACH; DETECTION METHODS; ECONOMIC LOSS; FALSE POSITIVE RATES; IDENTITY-BASED; INFORMATION EXTRACTION; NAMED ENTITY RECOGNITION; PHISHING; PRIOR KNOWLEDGE; SECURITY THREATS; TRAINING DATA; TRUE POSITIVE RATES;

INFORMATION RETRIEVAL; LOSSES; SEARCH ENGINES; WORLD WIDE WEB;

COMPUTER CRIME;

EID: 84865616735     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1526709.1526786     Document Type: Conference Paper

References (24)

1. http://toolbar.netcraft.com/.
2. http://sb.google.com/safebrowsing/update?version=goog-white-domain:1:1.
3. http://www.millersmiles.co.uk/scams.php.
4. http://www.uribl.com.
5. http://data.phishtank.com/data/online-valid/.
6. http://www.phishtank.com/stats.php.
7. http://dir.yahoo.com/Business-and-Economy/Shopping-and-Services/ Financial-Services/Banking/Banks/.
8. http://dir.yahoo.com/Business-and-Economy/Shopping-and-Services/ Financial-Services/Banking/Banks/By-Region/U-S-States/.
9. http://dir.yahoo.com/Business-and-Economy/Shopping-and-Services/ Financial-Services/Banking/Credit-Unions/.
10. http://dir.yahoo.com/Business-and-Economy/Shopping-and-Services/ Financial-Services/Online-Escrow-Services/.
11. http://dir.yahoo.com/Business-and-Economy/Business-to-Business/ Business-Opportunities/Travel-Agencies/.
12. http://dir.yahoo.com/Business-and-Economy/Business-to-Business/ Business-Opportunities/Investment-Opportunities/Real-Estate/.
13. http://dir.yahoo.com/Business-and-Economy/Business-to-Business/ Business-Opportunities/Financial-Services/.
14. Stanford named entity recognizer (version 1.1).http://nlp.stanford.edu/ software/CRF-NER.shtml.
15. The 2007 internet crime report. 2007. The Internet Crime Complaint Center (IC3). http://www.ic3.gov/media/annualreport/2007-IC3Report.pdf.
16. 3sharp report. Gone phishing: Evaluating anti-phishing tools for windows. Technical report, September 2006.
17. N. Chou, R. Ledesma, Y. Teraguchi, and J. C. Mitchell. Client-side defense against web-based identity theft. In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS'04), 2004.
18. R. Dhamija and J. Tygar. The battle against phishing: Dynamic security skins. In Proceedings of the 2005 symposium on Usable privacy and security (SOUPS'05), pages 77-88. ACM Press, 2005.
19. S. Garera, N. Provos, M. Chew, and A. D. Rubin. A framework for detection and measurement of phishing attacks. In Proceedings of the 2007 ACM Workshop on Recurring Malcode, pages 1-8, 2007.
20. C. Ludl, S. McAllister, E. Kirda, and C. Kruegel. On the effectiveness of techniques to detect phishing sites. Lecture Notes in Computer Science (LNCS), 4579:20-39, 2007.
21. Y. Pan and X. Ding. Anomaly based web phishing page detection. In Proceedings of the 22nd Annual Computer Security Applications Conference (ACSAC'06), pages 381-392, 2006.
22. E. F. T. K. Sang and F. D. Meulder. Introduction to the conll-2003 shared task: Language-independent named entity recognition. In Proceedings of the Seventh Conference on Computational Natural Language Learning (CoNLL-2003), pages 142-147, 2003.
23. Y. Zhang, S. Egelman, L. Cranor, and J. Hong. Phinding phish: An evaluation of anti-phishing toolbars. In Proceedings of the 14th Annual Network & Distributed System Security Symposium (NDSS 2007), 2007.
24. Y. Zhang, J. Hong, and L. Cranor. Cantina: a content-based approach to detecting phishing web sites. In Proceedings of the 16th International Conference on World Wide Web (WWW'07), pages 639-648, 2007.