Characteristics and responsibilities involved in a Phishing attack

Authors:
Alta van der Merwe;Marianne Loock;Marek Dabrowski
Affiliations:
University of South Africa, Unisa;University of South Africa, Unisa;University of South Africa, Unisa
Venue:
WISICT '05 Proceedings of the 4th international symposium on Information and communication technologies
Year:
2005

Citing 4
Cited 6

Network and internetwork security: principles and practice

Network and internetwork security: principles and practice
Online Fraud Gets Sophisticated

IEEE Internet Computing
Approaching Zero

IEEE Security and Privacy
Software Security

IEEE Security and Privacy

Don't be a phish: steps in user education

Proceedings of the 11th annual SIGCSE conference on Innovation and technology in computer science education
Puppetnets and botnets: information technology vulnerability exploits that threaten basic internet use

Proceedings of the 4th annual conference on Information security curriculum development
An evaluation of machine learning-based methods for detection of phishing sites

ICONIP'08 Proceedings of the 15th international conference on Advances in neuro-information processing - Volume Part I
SPS: a simple filtering algorithm to thwart phishing attacks

AINTEC'05 Proceedings of the First Asian Internet Engineering conference on Technologies for Advanced Heterogeneous Networks
Enforcing security with behavioral fingerprinting

Proceedings of the 7th International Conference on Network and Services Management
Survey and taxonomy of botnet research through life-cycle

ACM Computing Surveys (CSUR)

Quantified Score

Hi-index	0.00

Visualization

Abstract

'Phishing' is a fraudulent activity defined as the creation of a replica of an existing Web page to fool a user into submitting personal, financial, or password data. There are security service guidelines for both software security and web site security development environments. Developers use these guidelines when planning new systems (or during re-engineering of existing systems) to ensure a secure environment. The purpose of this paper is two-fold: firstly to consider the characteristics of a phishing attack and to identify a list of issues relevant to it; and secondly, to compare the nature of a phishing attack with the security services guidelines provided and to pinpoint the weakness(es) of phishing attacks if these guidelines are adhered to.