An information-sharing based anti-phishing system

• Main Authors: CHENG, Yueqing, YUAN, Zhen, MA, lei, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2007
• Subjects: Information Security; Management Information Systems
• Online Access: https://ink.library.smu.edu.sg/sis_research/4149; https://ink.library.smu.edu.sg/context/sis_research/article/5153/viewcontent/An_Information_Sharing_Based_Anti_Phishing_System.pdf
• Institution: Singapore Management University

This paper presents the design of an informationsharing based or server-assisted anti-phishing system. The system follows a client-server architecture and makes decision based on not only client side heuristics but also collective information from multiple clients. When visiting a web site, a client side proxy, installed as a plug-in to a browser, decides on the legitimacy of the web site based on a combination of white list, black list and heuristics. In case the client side proxy does not have sufficient information to make a clear judgment, it reports the suspicious site to a central server which has access to more complete and up to date information and is in a much better position than individual clients to make informed decisions. Our system is designed to counter against deceptive phishing as well as DNS-hijack attack.