Identify fixed-path phishing attack by STC

  • Authors:
  • Cheng Hsin Hsu;Polo Wang;Samuel Pu

  • Affiliations:
  • Trend Micro, Taipei, Taiwan;Trend Micro, Taipei, Taiwan;Trend Micro, Taipei, Taiwan

  • Venue:
  • Proceedings of the 8th Annual Collaboration, Electronic messaging, Anti-Abuse and Spam Conference
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Phishing websites gain billions of dollars of profits from stealing personal identities and private data. In this paper, an URL classification method is proposed to prioritize suspicious URLs in terms of phishing websites by examining the URL structures and performing string classification. Due to the fact that the average uptime of phishing sites is short, it is important for the proposed method to `timely react' to the newest phishing URLs while the URLs are still valid. Since the proposed method does not involve any web-crawling or content analysis, it can generate prioritized signatures from phishing URLs in a real-time fashion. Moreover, the proposed method consumes very little computing resources that, with an additional moderate PC, it can be injected into any existing real-time URL analysis system.