An intelligent anti-phishing solution: password-transaction secure window. (18th July 2011)

• Record Type: Journal Article
• Authors: Choukse, Dharmendra; Singh, Umesh Kumar; Kanellopoulos, Dimitris
• Is Part Of: International journal of internet technology and secured transactions. Volume 3:Number 3(2011)
• Page Start: 279
• Page End: 292
• Publication Date: 2011-07-18
• Subjects: phishing -- phishing attacks -- anti-phishing -- authentication -- computer fraud -- information assurance; Internet -- Security measures -- Periodicals; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1748-569X

Abstract

Current phishing attacks cause serious problems to both organisations and users. Phishing attackers try to steal the confidential information of the users such as their username, password etc. Phishing is done either by e-mails or instant messaging or by a spoofed website which is an exact replica of original one. It is very difficult to distinguish fake websites and legitimate websites. Homograph attacks help in phishing and make it more difficult for users to identify them. Some malware like key-loggers also help to steal the crucial information. A different type of malware called transaction generator (TG)is also used by attackers. Instead of passing the confidential information to attackers, a TG waits until users login into their accounts and then does the transaction illegally in the background. In this paper, we present several anti-phishing methods with their pros and cons. In addition, we propose an intelligent anti-phishing solution named Password-Transaction Secure Window (PTSW) in order to secure users and their personal information. The PTSW is a cheap and efficient solution against password and transaction attacks.