资源描述:
《client-side defense against web-based identity theft》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、Client-sidedefenseagainstweb-basedidentitytheftNeilChouRobertLedesmaYukaTeraguchiJohnC.MitchellComputerScienceDepartment,StanfordUniversity,StanfordCA94305fneilchou,led242,yukat,jcmg@stanford.eduAbstractexperimentwiththisapproachusingabrowserplug-inc
2、alledSpoofGuard.Theplug-inmonitorsauser’sIn-ternetactivity,computesaspoofindex,andwarnstheWebspoofingisasignificantprobleminvolvingfraud-useriftheindexexceedsalevelselectedbytheuser.ulentemailandwebsitesthattrickunsuspectingusersWhileInternet-savvyuser
3、swhowatchtheaddressbar,intorevealingprivateinformation.Wediscusssomestatusbar,andotherinformationcarefullymaynotneedaspectsofcommonattacksandproposeaframeworkSpoofGuard,thecurrentlevelofaccuracyandeffec-forclient-sidedefense:abrowserplug-inthatexam-t
4、ivenessmaybesufficienttohelpmanyunsophisticatedineswebpagesandwarnstheuserwhenrequestsforwebusers.Ifthemethodsweproposebecomewidelydatamaybepartofaspoofattack.Whiletheplug-deployed,throughourplug-inorthroughotherclient-in,SpoofGuard,hasbeentestedusing
5、actualsitesob-sidedefensivesoftware,thenphisherswillcertainlytaketainedthroughgovernmentagenciesconcernedaboutstepstocircumventthem.However,weexpectfurthertheproblem,weexpectthatwebspoofingandothereffortandstudytoproducecorrespondinglybetterde-formsof
6、identitytheftwillbecontinuingproblemsinfenses.Moreover,ifsynergisticserver-sidemethodsarecomingyears.deployedbyconcernedcompanies,itseemspossibletothwartincreasinglysophisticatedattacks.SpoofGuardusesdomainname,url,link,and1Introductionimagecheckstoe
7、valuatethelikelihoodthatagivenpageispartofaspoofattack.Forex-Webspoofing,alsoknownas“phishing”or“carding”ample,apagewithasuspiciousurlsuchas[CNN03,FBI03],isasignificantformofInternetcrimeetrade-maintenance.suspicious.orgthatislaunchedagainsthundredsort
8、housandsofindi-orwww.etrade.com@129.170.213.101/vidualseachday.TheUSSecretServiceandtheSanmaintainance.aspandanE*TradelogowillhaveFranciscoElectronicCrimesTaskForcereportthatap-ahigherspoofindexthanapagewithneitheroftheseproximately30attacksitesarede