Utilisation of website logo for phishing detection. Issue 54 (October 2015)

• Record Type: Journal Article
• Authors: Chiew, Kang Leng; Chang, Ee Hung; Sze, San Nah; Tiong, Wei King
• Is Part Of: Computers & security. Issue 54(2015)
• Page Start: 16
• Page End: 26
• Publication Date: 2015-10
• Subjects: Anti-phishing -- Website logo -- Website identity -- Google image search -- Identity consistency -- Logo extraction; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2015.07.006
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Phishing is a security threat which combines social engineering and website spoofing techniques to deceive users into revealing confidential information. In this paper, we propose a phishing detection method to protect Internet users from the phishing attacks. In particular, given a website, our proposed method will be able to detect if it is a phishing website. We use a logo image to determine the identity consistency between the real and the portrayed identity of a website. Consistent identity indicates a legitimate website and inconsistent identity indicates a phishing website. The proposed method consists of two processes, namely logo extraction and identity verification. The first process will detect and extract the logo image from all the downloaded image resources of a webpage. In order to detect the right logo image, we utilise a machine learning technique. Based on the extracted logo image, the second process will employ the Google image search to retrieve the portrayed identity. Since the relationship between the logo and domain name is exclusive, it is reasonable to treat the domain name as the identity. Hence, a comparison between the domain name returned by Google with the one from the query website will enable us to differentiate a phishing from a legitimate website. The conducted experiments show reliable and promising results. This proves the effectiveness and feasibility of using a graphical element such as a logo to detect a phishing website.