Decisive heuristics to differentiate legitimate from phishing sites - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Decisive heuristics to differentiate legitimate from phishing sites

Résumé

Phishing attacks are a major concern for preserving Internet users privacy, especially when most of them lead to financial data theft by combining both social engineering and spoofing techniques. As blacklists are not the most effective in detecting phishing sites because of their short lifetime, heuristics appears as a privileged way at time 0. Several previous studies discussed the different types of phishing characteristics that can help defining heuristics tests, as well as comparing them to blacklists. In our paper, we studied heuristics using a different approach. Based on the characteristics of phishing URLs and webpages, we defined 20 heuristics tests and implemented them in our own active anti-phishing toolbar (Phishark). Then, we tested the heuristics effectiveness and determined which heuristics are decisive to differentiate legitimate from phishing sites

Mots clés

Fichier principal
Vignette du fichier
Paper-gastellier-decisive-heuristics-SARSSI11.pdf (238.8 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01304087 , version 1 (19-04-2016)

Identifiants

Citer

Sophie Gastellier-Prevost, Gustavo Daniel Gonzalez Granadillo, Maryline Laurent. Decisive heuristics to differentiate legitimate from phishing sites. SAR-SSI 2011 : 6th Conference on Network Architectures and Information Systems Security, May 2011, La Rochelle, France. pp.1 - 9, ⟨10.1109/SAR-SSI.2011.5931389⟩. ⟨hal-01304087⟩
66 Consultations
522 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More