Large-Scale Automatic Classification of Phishing Pages

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2010

Volumn , Issue , 2010, Pages

  Whittaker, Colin ^a   Ryner, Brian ^a   Nazif, Marria ^a  

^a GOOGLE INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); COMPUTER CRIME; NETWORK SECURITY;

AUTOMATIC CLASSIFICATION; DESIGN CHARACTERISTICS; INTERNET USERS; LARGE-SCALES; PERFORMANCE CHARACTERISTICS; PHISHING; PHISHING WEBSITES; PRIVATE DATA; SCALABLE MACHINE LEARNING; TRUSTED THIRD PARTIES;

WEBSITES;

EID: 85006397404     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. Advanced Network Technology Center, University of Oregon. University of Oregon Route Views Project. http://www.routeviews.org/, Jan. 2005.
2. Anti-Phishing Working Group. Phishing Activity Trends Report for the Month of January, 2008. http://www.antiphishing.org/reports/apwg_report_jan_2008.pdf, 2008.
3. Anti-Phishing Working Group. Phishing Activity Trends Report, H2/2008. http://www.antiphishing.org/reports/apwg_report_H2_2008.pdf, Mar. 2009.
4. M. Barreno, B. Nelson, R. Sears, A. D. Joseph, and J. D. Tygar. Can machine learning be secure? In ASIACCS’06: Proceedings of the 2006 ACM Symposium on Information, computer and communications security, pages 16–25, Mar. 2006.
5. J. Bem, G. Harik, J. Levenberg, N. Shazeer, and S. Tong. Large scale machine learning and methods. US Patent 7222127, 2007.
6. L. Breiman. Random Forests. Machine Learning, 45(1):5–32, 2001.
7. G. Casto, O. Fisher, R. Moll, M. Nazif, and D. Born. Client specification for the Google Safe Browsing v2.1 protocol. http://code.google.com/p/google-safe-browsing/wiki/ Protocolv2Spec, 2007.
8. F. Chang, J. Dean, S. Ghemawat, W. C. Hsieh, D. A. Wallach, M. Burrows, T. Chandra, A. Fikes, and R. E. Gruber. Bigtable: A Distributed Storage System for Structured Data. In OSDI’06: Proceedings of the 7th symposium on Operating systems design and implementation, pages 205–218, Nov. 2006.
9. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. Mitchell. Client-side Defense against Web-Based Identity Theft. In NDSS’04: Proceedings of the 11th Annual Network and Distributed System Security Symposium, Feb. 2004.
10. R. Dhamija, J. D. Tygar, and M. Hearst. Why Phishing Works. In CHI’06: Proceedings of the SIGCHI conference on Human Factors in computing systems, pages 581–590, Apr. 2006.
11. J. S. Downs, M. B. Holbrook, and L. F. Cranor. Decision Strategies and Susceptibility to Phishing. In SOUPS’06: Proceedings of the second symposium on Usable privacy and security, pages 79–90, July 2006.
12. S. Egelman, L. F. Cranor, and J. Hong. You’ve Been Warned: An Empirical Study of the Effectiveness of Web Browser Phishing Warnings. In CHI’08: Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems, pages 1065–1074, Apr. 2008.
13. I. Fette, N. Sadeh, and A. Tomasic. Learning to Detect Phishing Emails. In WWW’07: Proceedings of the 16th international conference on World Wide Web, pages 649–656, May 2007.
14. B. J. Fogg, J. Marshall, O. Laraki, A. Osipovich, C. Varma, N. Fang, J. Paul, A. Rangnekar, J. Shon, P. Swani, and M. Treinen. What Makes Web Sites Credible?: A Report on a Large Quantitative Study. In CHI’01: Proceedings of the SIGCHI conference on Human factors in computing systems, pages 61–68, March-April 2001.
15. G. Forman. An Extensive Empirical Study of Feature Selection Metrics for Text Classification. Journal of Machine Learning Research, 3:1289–1305, 2003.
16. S. Garera, N. Provos, M. Chew, and A. D. Rubin. A Framework for Detection and Measurement of Phishing Attacks. In WORM’07: Proceedings of the 2007 ACM workshop on Recurring malcode, pages 1–8, Nov. 2007.
17. Gartner, Inc. Gartner Says Number of Phishing Attacks on U.S. Consumers Increased 40 Percent in 2008. http://www.gartner.com/it/page.jsp?id=936913, Apr. 2009.
18. Google. Google Safe Browsing API. http://code.google.com/apis/safebrowsing/, 2009.
19. C. Herley and D. Florencio. A Profitless Endeavor: Phishing as Tragedy of the Commons. In NSPW’08: Proceedings of the 2008 workshop on New security paradigms, Sept. 2008.
20. C. Ludl, S. McAllister, E. Kirda, and C. Kruegel. On the Effectiveness of Techniques to Detect Phishing Sites. In DIMVA’07: Proceedings of the 4th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment, pages 20–39, July 2007.
21. J. Ma, L. K. Saul, S. Savage, and G. M. Voelker. Beyond Blacklists: Learning to Detect Malicious Web Sites from Suspicious URLs. In KDD’09: Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining, pages 1245–1254, June–July 2009.
22. J. Ma, L. K. Saul, S. Savage, and G. M. Voelker. Identifying Suspicious URLs: An Application of Large-Scale Online Learning. In ICML’09: Proceedings of the 26th Annual International Conference on Machine Learning, pages 681–688, June 2009.
23. Microsoft. Internet Explorer 8 Security: SmartScreen Filter. http://www.microsoft.com/security/filters/smartscreen.aspx, 2009.
24. Netcraft. Netcraft Toolbar. http://toolbar.netcraft.com/, 2004.
25. OpenDNS. Phishtank. http://www.phishtank.com/, 2009.
26. L. Page, S. Brin, R. Motwani, and T. Winograd. The PageRank Citation Ranking: Bringing Order to the Web. Technical report, Stanford Digital Library Technologies Project, 1998.
27. ‘RSnake’. Phishing Social Networking Sites. http://ha.ckers.org/blog/20070508/, May 2007.
28. G. Salton and M. J. McGill. Introduction to Modern Information Retrieval. McGraw-Hill, Inc., New York, NY, USA, 1983.
29. F. Schneider, N. Provos, R. Moll, M. Chew, and B. Rakowski. Phishing Protection Design Documentation. http://wiki.mozilla.org/Phishing_Protection:_Design_Documentation, 2006.
30. S. Sheng, B. Wardman, G. Warner, L. F. Cranor, J. Hong, and C. Zhang. An Empirical Analysis of Phishing Blacklists. In CEAS 2009: Sixth Conference on Email and Anti-Spam, July 2009.
31. B. Stone-Gross, M. Cova, L. Cavallaro, B. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna. Your Botnet is My Botnet: Analysis of a Botnet Takeover. In CCS ’09: Proceedings of the 16th ACM conference on Computer and communications security, Nov. 2009.
32. B. Taylor. Sender Reputation in a Large Webmail Service. In CEAS 2006: Third Conference on Email and Anti-Spam, July 2006.
33. M. Wu, R. C. Miller, and S. L. Garfinkel. Do Security Tool-bars Actually Prevent Phishing Attacks? In CHI’06: Proceedings of the SIGCHI conference on Human Factors in computing systems, pages 601–610, Apr. 2006.
34. Y. Zhang, S. Egelman, L. F. Cranor, and J. I. Hong. Phinding Phish: Evaluating Anti-Phishing Tools. In NDSS’07: Proceedings of the 14th Annual Network and Distributed System Security Symposium, February–March 2007.
35. Y. Zhang, J. I. Hong, and L. F. Cranor. CANTINA: A Content-Based Approach to Detecting Phishing Web Sites. In WWW’07: Proceedings of the 16th international conference on World Wide Web, pages 639–648, May 2007.