MMSPhiD: a phoneme based phishing verification model for persons with visual impairments. (12th November 2018)

• Record Type: Journal Article
• Authors: Sonowal, Gunikhan; Kuppusamy, KS
• Is Part Of: Information and computer security. Volume 26:Number 5(2018)
• Page Start: 613
• Page End: 636
• Publication Date: 2018-11-12
• Subjects: Phishing -- Social engineering -- Cyber-crime -- Phoneme domains -- Typosquatting; Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-12-2017-0091
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: This paper aims to propose a model entitled MMSPhiD (multidimensional similarity metrics model for screen reader user to phishing detection) that amalgamates multiple approaches to detect phishing URLs. Design/methodology/approach: The model consists of three major components: machine learning-based approach, typosquatting-based approach and phoneme-based approach. The major objectives of the proposed model are detecting phishing URL, typosquatting and phoneme-based domain and suggesting the legitimate domain which is targeted by attackers. Findings: The result of the experiment shows that the MMSPhiD model can successfully detect phishing with 99.03 per cent accuracy. In addition, this paper has analyzed 20 leading domains from Alexa and identified 1, 861 registered typosquatting and 543 phoneme-based domains. Research limitations/implications: The proposed model has used machine learning with the list-based approach. Building and maintaining the list shall be a limitation. Practical implication: The results of the experiments demonstrate that the model achieved higher performance due to the incorporation of multi-dimensional filters. Social implications: In addition, this paper has incorporated the accessibility needs of persons with visual impairments and provides an accessible anti-phishing approach. Originality/value: This paper assists persons with visual impairments on detection phoneme-based phishing domains.