loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2009 Ninth Annual International Symposium on Applications and the Internet
Evaluation of Online Resources in Assisting Phishing Detection
Bellevue, Washington, USA
July 20-July 24
ISBN: 978-0-7695-3700-9
Phishing is an attempt to fraudulently acquire users’ sensitive information, such as passwords or financial information, by masquerading as a trustworthy entity in online transactions. Recently, a number of researchers have proposed using external online resources like the Google Page Rank system to assist phishing detection. The advantage of such an approach is that the detection capability will gradually evolve and improve as the online resources become more sophisticated and manipulation-resistant. In this paper, we evaluate the effectiveness of three popular online resources in detecting phishing sites—viz, Google PageRank system, Yahoo! Inlink data, and Yahoo! directory service. Our results indicate that these online resources can be used to increase the accuracy of phishing site detection when used in conjunction with existing phishing countermeasures. The proposed approach involves examining the following three attributes of a target site (site being examined): (1) the credibility of the target site’s hosting domain, (2) the credibility of in-neighbor sites that link to the hosting domain, and (3) the correlation between the target site’s web category and its hosting domain’s web category. The aforementioned online resources by themselves are insufficient to address the phishing attack problem. We provide discussions on how each of those resources may be integrated with existing phishing detection techniques to provide a more effective solution.
Citation:
Kaigui Bian, Jung-Min ''Jerry'' Park, Michael S. Hsiao, France Bélanger, Janine Hiller, "Evaluation of Online Resources in Assisting Phishing Detection," saint, pp.30-36, 2009 Ninth Annual International Symposium on Applications and the Internet, 2009
Usage of this product signifies your acceptance of the Terms of Use.