Defending the weakest link: phishing websites detection by analysing user behaviours

Phishing detection systems are principally based on the analysis of data moving from phishers to victims. In this paper we describe a novel approach for detecting phishing websites based on analysis of users' online behaviours-i.e., the websites users have visited, and the data users have submitted to those websites. Such user behaviours can not be manipulated freely by attackers; detection based on those data can achieve high accuracy whilst being fundamentally resilient against changing deception methods. Keywords Phishing attacks

• Type: Journal
• Year: 2010
• Where: TELSYS
• Authors: Xun Dong, John A. Clark, Jeremy L. Jacob
• Keywords: Detection, Education, Phishing, TELSYS 2010, Websites