Phishwish: A Stateless Phishing Filter Using Minimal Rules

Authors:
Debra L. Cook;Vijay K. Gurbani;Michael Daniluk
Affiliations:
No Affiliations,;Alcatel-Lucent, Bell Labs, ,;Polytechnic University,
Venue:
Financial Cryptography and Data Security
Year:
2008

Citing 5
Cited 0

Telling humans and computers apart automatically

Communications of the ACM - Information cities
Why phishing works

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Do security toolbars actually prevent phishing attacks?

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Web wallet: preventing phishing attacks by revealing user intentions

SOUPS '06 Proceedings of the second symposium on Usable privacy and security
Cantina: a content-based approach to detecting phishing web sites

Proceedings of the 16th international conference on World Wide Web

Quantified Score

Hi-index	0.00

Visualization

Abstract

We introduce phishwish, a phishing filter that offers advantages over existing filters: It does not need any training and does not consult centralized white or black lists. Furthermore, it is simple to configure, requiring only 11 rules to determine the veracity of an incoming email. We compare the performance of phishwish to SpamAssassin and to Google's browser-based phishing filter. Our results indicate that phishwish outperforms these filters and identifies zero days attacks that went undetected by existing filters.