• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>ACM Transactions on Internet Technology >BogusBiter: A Transparent Protection Against Phishing Attacks
【24h】

BogusBiter: A Transparent Protection Against Phishing Attacks

机译：BogusBiter：透明的网络钓鱼攻击防护

获取原文
获取原文并翻译 | 示例
       
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Many anti-phishing mechanisms currently focus on helping users verify whether a Web site is genuine. However, usability studies have demonstrated that prevention-based approaches alone fail to effectively suppress phishing attacks and protect Internet users from revealing their credentials to phishing sites. In this paper, instead of preventing human users from "biting the bait," we propose a new approach to protect against phishing attacks with "bogus bites." We develop BogusBiter, a unique client-side anti-phishing tool, which transparently feeds a relatively large number of bogus credentials into a suspected phishing site. BogusBiter conceals a victim's real credential among bogus credentials, and moreover, it enables a legitimate Web site to identify stolen credentials in a timely manner. Leveraging the power of client-side automatic phishing detection techniques, BogusBiter is complementary to existing preventive anti-phishing approaches. We implemented BogusBiter as an extension to the Firefox 2 Web browser, and evaluated its efficacy through real experiments on both phishing and legitimate Web sites. Our experimental results indicate that it is promising to use BogusBiter to transparently protect against phishing attacks.
机译：当前，许多反网络钓鱼机制都致力于帮助用户验证网站是否真实。但是，可用性研究表明，仅基于预防的方法无法有效地抑制网络钓鱼攻击，并不能保护Internet用户向网络钓鱼站点泄露其凭据。在本文中，我们提出了一种新的方法来防止具有“虚假咬伤”的网络钓鱼攻击，而不是阻止人类用户“咬住诱饵”。我们开发了BogusBiter，这是一种独特的客户端反网络钓鱼工具，可以透明地将相对大量的伪造凭据提供给可疑的网络钓鱼站点。 BogusBiter在伪造的凭据中隐藏了受害者的真实凭据，而且，它使合法的网站能够及时识别被盗的凭据。借助客户端自动网络钓鱼检测技术的强大功能，BogusBiter可以补充现有的预防性反网络钓鱼方法。我们将BogusBiter实施为Firefox 2 Web浏览器的扩展，并通过在网络钓鱼和合法Web站点上进行的真实实验评估了其有效性。我们的实验结果表明，使用BogusBiter透明地防御网络钓鱼攻击是有希望的。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号