HumanBoost: Utilization of Users' Past Trust Decision for Identifying Fraudulent Websites

Authors:
Daisuke Miyamoto;Hiroaki Hazeyama;Youki Kadobayashi
Affiliations:
Traceable Network Group, National Institute of Information and Communications Technology, Tokyo, Japan 184-8795;Graduate School of Information Science Internet Engineering Laboratory, Nara Institute of Science and Technology, Nara, Japan 630-0192;Graduate School of Information Science Internet Engineering Laboratory, Nara Institute of Science and Technology, Nara, Japan 630-0192
Venue:
ICONIP '09 Proceedings of the 16th International Conference on Neural Information Processing: Part II
Year:
2009

Citing 6
Cited 0

Why phishing works

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
The methodology and an application to fight against Unicode attacks

SOUPS '06 Proceedings of the second symposium on Usable privacy and security
Anomaly Based Web Phishing Page Detection

ACSAC '06 Proceedings of the 22nd Annual Computer Security Applications Conference
Cantina: a content-based approach to detecting phishing web sites

Proceedings of the 16th international conference on World Wide Web
Learning to detect phishing emails

Proceedings of the 16th international conference on World Wide Web
A comparison of machine learning techniques for phishing detection

Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present an approach that aims to study users' past trust decisions (PTDs) for improving the accuracy of detecting phishing sites. Generally, Web users required to make trust decisions whenever their personal information is asked for by websites. We assume that the database of users' PTDs would be transformed into a binary vector, representing phishing or not, and the binary vector can be used for detecting phishing sites similar to the existing heuristics. For our pilot study, we invited 10 participants and performed a subject experiment in November 2007. The participants browsed 14 emulated phishing sites and 6 legitimate sites, and checked whether the site appeared to be a phishing site or not. By utilizing participants' trust decision as a new heuristic, we let AdaBoost incorporate the heuristic into 8 existing heuristics. The results show that the average error rate in the case of HumanBoost is 9.5%, whereas that in the case of participants is 19.0% and that in the case of AdaBoost is 20.0%. Thus, we conclude that HumanBoost has a potential to improve the detection accuracy for each Web user.