client-side defense against web-based identity theft

《client-side defense against web-based identity theft》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、Client-sidedefenseagainstweb-basedidentitytheftNeilChouRobertLedesmaYukaTeraguchiJohnC.MitchellComputerScienceDepartment,StanfordUniversity,StanfordCA94305fneilchou,led242,yukat,jcmg@stanford.eduAbstractexperimentwiththisapproachusingabrowserplug-inc

2、alledSpoofGuard.Theplug-inmonitorsauser’sIn-ternetactivity,computesaspoofindex,andwarnstheWebspoofingisasignificantprobleminvolvingfraud-useriftheindexexceedsalevelselectedbytheuser.ulentemailandwebsitesthattrickunsuspectingusersWhileInternet-savvyuser

3、swhowatchtheaddressbar,intorevealingprivateinformation.Wediscusssomestatusbar,andotherinformationcarefullymaynotneedaspectsofcommonattacksandproposeaframeworkSpoofGuard,thecurrentlevelofaccuracyandeffec-forclient-sidedefense:abrowserplug-inthatexam-t

4、ivenessmaybesufficienttohelpmanyunsophisticatedineswebpagesandwarnstheuserwhenrequestsforwebusers.Ifthemethodsweproposebecomewidelydatamaybepartofaspoofattack.Whiletheplug-deployed,throughourplug-inorthroughotherclient-in,SpoofGuard,hasbeentestedusing

5、actualsitesob-sidedefensivesoftware,thenphisherswillcertainlytaketainedthroughgovernmentagenciesconcernedaboutstepstocircumventthem.However,weexpectfurthertheproblem,weexpectthatwebspoofingandothereffortandstudytoproducecorrespondinglybetterde-formsof

6、identitytheftwillbecontinuingproblemsinfenses.Moreover,ifsynergisticserver-sidemethodsarecomingyears.deployedbyconcernedcompanies,itseemspossibletothwartincreasinglysophisticatedattacks.SpoofGuardusesdomainname,url,link,and1Introductionimagecheckstoe

7、valuatethelikelihoodthatagivenpageispartofaspoofattack.Forex-Webspoofing,alsoknownas“phishing”or“carding”ample,apagewithasuspiciousurlsuchas[CNN03,FBI03],isasignificantformofInternetcrimeetrade-maintenance.suspicious.orgthatislaunchedagainsthundredsort

8、housandsofindi-orwww.etrade.com@129.170.213.101/vidualseachday.TheUSSecretServiceandtheSanmaintainance.aspandanE*TradelogowillhaveFranciscoElectronicCrimesTaskForcereportthatap-ahigherspoofindexthanapagewithneitheroftheseproximately30attacksitesarede