A Multistage Framework to Defend Against Phishing Attacks

View Sample PDF

Author(s): Madhusudhanan Chandrasekaran (SUNY at Buffalo, USA)and Shambhu Upadhyaya (State University of New York, USA)
Copyright: 2009
Pages: 18
Source title: Handbook of Research on Social and Organizational Liabilities in Information Security
Source Author(s)/Editor(s): Manish Gupta (State University of New York, USA)and Raj Sharman (State University of New York, USA)
DOI: 10.4018/978-1-60566-132-2.ch011

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View A Multistage Framework to Defend Against Phishing Attacks on the publisher's website for pricing and purchasing information.

Abstract

Phishing scams pose a serious threat to end-users and commercial institutions alike. E-mail continues to be the favorite vehicle to perpetrate such scams, mainly due to its widespread use combined with the ability to easily spoof them. Several approaches, both generic and specialized, have been proposed to address this growing problem. However, phishing techniques, growing in ingenuity as well as sophistication, render these solutions weak. To overcome these limitations, we propose a multistage framework – the first stage aims at detecting phishing based on their semantic and structural properties, whereas in the second stage we propose a proactive technique based on a challenge-response technique to establish the authenticity of a Web site. Using live e-mail data, we demonstrate that our approach with these two stages is able to detect a wider range of phishing attacks than existing schemes. Also, our performance analysis study shows that the implementation overhead introduced by our tool is negligibly small.

The IRMA Community

Research IRM

A Multistage Framework to Defend Against Phishing Attacks

Purchase

Abstract

Related Content

IRMA Sponsors