Title
Proactive discovery of phishing related domain names
Abstract
Phishing is an important security issue to the Internet, which has a significant economic impact. The main solution to counteract this threat is currently reactive blacklisting; however, as phishing attacks are mainly performed over short periods of time, reactive methods are too slow. As a result, new approaches to early identify malicious websites are needed. In this paper a new proactive discovery of phishing related domain names is introduced. We mainly focus on the automated detection of possible domain registrations for malicious activities. We leverage techniques coming from natural language modelling in order to build pro-active blacklists. The entries in this list are built using language models and vocabularies encountered in phishing related activities - "secure", "banking", brand names, etc. Once a pro-active blacklist is created, ongoing and daily monitoring of only these domains can lead to the efficient detection of phishing web sites.
Year
DOI
Venue
2012
10.1007/978-3-642-33338-5_10
RAID
Keywords
Field
DocType
automated detection,new proactive discovery,phishing web site,language model,malicious web,phishing attack,proactive discovery,related domain name,new approach,natural language,efficient detection,malicious activity,phishing
World Wide Web,Phishing,Computer security,Computer science,Blacklist,Blacklisting,Natural language,Language model,The Internet
Conference
Citations 
PageRank 
References 
18
0.73
20
Authors
4
Name
Order
Citations
PageRank
Samuel Marchal114611.72
Jérôme François217021.81
Radu State362386.87
Thomas Engel445542.34