PhishScore: Hacking phishers' minds

Proceedings of the 10th International Conference on Network and Service Management, CNSM 2014

Volumn , Issue , 2014, Pages 46-54

  Marchal, Samuel ^a,b   Francois, Jerome ^a,c   State, Radu ^a   Engel, Thomas ^a  

^a UNIVERSITY OF LUXEMBOURG   (Luxembourg)

^b UNIVERSITÉ DE LORRAINE   (France)

^c INRIA   (France)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); PERSONAL COMPUTING; SEARCH ENGINES;

PHISHERS; PHISHING; PHISHING DETECTIONS; PREVENTION TECHNIQUES; QUERY DATUM; REAL TIME;

COMPUTER CRIME;

EID: 84922786055     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CNSM.2014.7014140     Document Type: Conference Paper

References (36)

1. "Gartner survey shows phishing attacks escalated in 2007, " Gartner Research, Tech. Rep., 2007. [Online]. Available: http://www. gartner. com/newsroom/id/565125
2. "2010 Identity Fraud Survey Report, " Javelin Strategy &Research, Tech. Rep., 2010.
3. "Global Phishing Survey: Trends and Domain Name Use, " APWG, Tech. Rep. 2H2011, 2012.
4. "Phishing Activity Trends Report, " APWG, Tech. Rep. 3rd Quarter 2012, 2013.
5. K. W. Church and P. Hanks, "Word association norms, mutual information, and lexicography, " Computational linguistics, vol. 16, no. 1, pp. 22-29, 1990.
6. R. L. Cilibrasi and P. M. Vitanyi, "The Google similarity distance, " Knowledge and Data Engineering, IEEE Transactions on, vol. 19, no. 3, pp. 370-383, 2007.
7. P. Kolb, "Disco: A multilingual database of distributionally similar words, " in Proceedings of KONVENS-2008, 2008.
8. G. A. Miller et al., "Wordnet: a lexical database for english, " Communications of the ACM, vol. 38, no. 11, pp. 39-41, 1995.
9. P. Mockapetris, "RFC 1034: Domain Names-Concepts and Facilities, " 1987.
10. -, "RFC 1035: Domain Names-Implementation and Specification, " 1987.
11. P. Mockapetris and K. Dunlap, "Development of the domain name system, " in Proceedings of the 1988 ACM SIGCOMM. IEEE Computer Society, 1988.
12. S. Garera, N. Provos, M. Chew, and A. D. Rubin, "A framework for detection and measurement of phishing attacks, " in Proceedings of the 2007 ACM workshop on recurring malcode. ACM, 2007, pp. 1-8.
13. T. Segaran and J. Hammerbacher, Beautiful data: the stories behind elegant data solutions. O'Reilly Media, Incorporated, 2009.
14. S. Marchal, J. Francois, R. State, and T. Engel, "Proactive discovery of phishing related domain names, " in Research in Attacks, Intrusions, and Defenses. Springer, 2012, pp. 190-209.
15. T. K. Landauer and S. T. Dumais, "A solution to Plato's problem: The latent semantic analysis theory of acquisition, induction, and representation of knowledge, " Psychological Review; Psychological Review, vol. 104, no. 2, p. 211, 1997.
16. M. Khonji, Y. Iraqi, and A. Jones, "Lexical url analysis for discriminating phishing and legitimate e-mail messages, " in 2011 International Conference for Internet Technology and Secured Transactions (ICITST), 2011, pp. 422-427.
17. J. Ma, L. K. Saul, S. Savage, and G. M. Voelker, "Identifying suspicious URLs: an application of large-scale online learning, " in Proceedings of the 26th Annual International Conference on Machine Learning. ACM, 2009, pp. 681-688.
18. A. Le, A. Markopoulou, and M. Faloutsos, "Phishdef: URL names say it all, " in INFOCOM, 2011 Proceedings IEEE. IEEE, 2011, pp. 191-195.
19. P. Prakash, M. Kumar, R. Kompella, and M. Gupta, "Phishnet: predictive blacklisting to detect phishing attacks, " in Proceedings of INFOCOM. IEEE, 2010, pp. 1-5.
20. G. Forman and M. Scholz, "Apples-to-apples in cross-validation studies: Pitfalls in classifier performance measurement, " SIGKDD Explor. Newsl., vol. 12, no. 1, pp. 49-57, 2010.
21. M. Hall, E. Frank, G. Holmes, B. Pfahringer, P. Reutemann, and I. H. Witten, "The WEKA data mining software: an update, " ACM SIGKDD Explorations Newsletter, vol. 11, no. 1, pp. 10-18, 2009.
22. L. Breiman, "Random forests, " Machine learning, vol. 45, no. 1, pp. 5-32, 2001.
23. S. Yadav, A. K. K. Reddy, A. N. Reddy, and S. Ranjan, "Detecting algorithmically generated malicious domain names, " in Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement, ser. IMC '10. ACM, 2010.
24. T.-C. Chen, S. Dick, and J. Miller, "Detecting visually similar web pages: Application to phishing detection, " ACM Transactions on Internet Technology, vol. 10, no. 2, 2010.
25. E. Medvet, E. Kirda, and C. Kruegel, "Visual-similarity-based phishing detection, " in Proceedings of the 4th international conference on security and privacy in communication netowrks. ACM, 2008, p. 22.
26. G. Xiang and J. I. Hong, "A hybrid phish detection approach by identity discovery and keywords retrieval, " in Proceedings of the 18th international conference on World wide web. ACM, 2009, pp. 571-580.
27. Y. Zhang, J. I. Hong, and L. F. Cranor, "Cantina: a content-based approach to detecting phishing web sites, " in Proceedings of the 16th international conference on World Wide Web. ACM, 2007, pp. 639-648.
28. M. Antonakakis, R. Perdisci, D. Dagon, W. Lee, and N. Feamster, "Building a dynamic reputation system for DNS, " in 19th Usenix Security Symposium, 2010.
29. L. Bilge, E. Kirda, C. Kruegel, and M. Balduzzi, "Exposure: Finding malicious domains using passive DNS analysis, " in Proceedings of NDSS, 2011.
30. J. Ma, L. K. Saul, S. Savage, and G. M. Voelker, "Beyond blacklists: learning to detect malicious web sites from suspicious urls, " in Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining. ACM, 2009.
31. J. Zhang, P. Porras, and J. Ullrich, "Highly predictive blacklisting, " in Proceedings of the 17th conference on Security symposium. USENIX Association, 2008.
32. J. Zhang, Q. Li, Q. Wang, T. Geng, X. Ouyang, and Y. Xin, "Parsing and detecting phishing pages based on semantic understanding of text, " Journal of Information &Computational Science, no. 9, pp. 1521-1534, 2012.
33. V. Ramanathan and H. Wechsler, "phishGILLNET phishing detection methodology using probabilistic latent semantic analysis, AdaBoost, and co-training, " EURASIP Journal on Multimedia and Information Security, vol. 2012, no. 1, pp. 1-22, 2012.
34. J. Rech, "Discovering trends in software engineering with Google Trend, " ACM SIGSOFT Software Engineering Notes, vol. 32, no. 2, pp. 1-2, 2007.
35. J. Ginsberg, M. H. Mohebbi, R. S. Patel, L. Brammer, M. S. Smolinski, and L. Brilliant, "Detecting influenza epidemics using search engine query data, " Nature, vol. 457, no. 7232, pp. 1012-1014, 2008.
36. H. Liu, J. He, Y. Gu, H. Xiong, and X. Du, "Detecting and tracking topics and events from web search logs, " ACM Trans. Inf. Syst., vol. 30, no. 4, pp. 21:1-21:29, Nov. 2012.