Itrustpage: a user-assisted anti-phishing tool

Despite the many solutions proposed by industry and the research community to address phishing attacks, this problem continues to cause enormous damage. Because of our inability to deter phishing attacks, the research community needs to develop new approaches to anti-phishing solutions. Most of today’s anti-phishing technologies focus on automatically detecting and preventing phishing attacks. While automation makes anti-phishing tools user-friendly, automation also makes them suffer from false positives, false negatives, and various practical hurdles. As a result, attackers often find simple ways to escape automatic detection. This paper presents iTrustPage – an anti-phishing tool that does not rely completely on automation to detect phishing. Instead, iTrustPage relies on user input and external repositories of information to prevent users from filling out phishing Web forms. With iTrustPage, users help to decide whether or not a Web page is legitimate. Because iTrustPage is u...

• Type: Conference
• Year: 2008
• Where: EUROSYS
• Authors: Troy Ronda, Stefan Saroiu, Alec Wolman
• Keywords: Anti-phishing Permission, Automatic Phishing Detection, EUROSYS 2008, System Software, Today’s Anti-phishing Technologies