Title
The phish-market protocol: securely sharing attack data between competitors
Abstract
A key way in which banks mitigate the effects of phishing is to remove fraudulent websites or suspend abusive domain names. This ‘take-down’ is often subcontracted to specialist firms. Prior work has shown that these take-down companies refuse to share ‘feeds’ of phishing website URLs with each other, and consequently, many phishing websites are not removed because the firm with the take-down contract remains unaware of their existence. The take-down companies are reticent to exchange feeds, fearing that competitors with less comprehensive lists might ‘free-ride’ off their efforts by not investing resources to find new websites, as well as use the feeds to poach clients. In this paper, we propose the Phish-Market protocol, which enables companies with less comprehensive feeds to learn about websites impersonating their own clients that are held by other firms. The protocol is designed so that the contributing firm is compensated only for those websites affecting its competitor’s clients and only those previously unknown to the receiving firm. Crucially, the protocol does not reveal to the contributing firm which URLs are needed by the receiver, as this is viewed as sensitive information by take-down firms. Using complete lists of phishing URLs obtained from two large take-down companies, our elliptic-curve-based implementation added a negligible average 5 second delay to securely share URLs.
Year
DOI
Venue
2010
10.1007/978-3-642-14577-3_18
Financial Cryptography
Keywords
Field
DocType
take-down firm,attack data,large take-down company,contributing firm,take-down contract,specialist firm,take-down company,phishing web,phishing urls,share urls,phish-market protocol,website urls,elliptic curve,free riding
Internet privacy,Trusted third party,Phishing,Computer security,Computer science,Queuing delay,Information sensitivity,Competitor analysis,Oblivious transfer
Conference
Volume
ISSN
ISBN
6052
0302-9743
3-642-14576-0
Citations 
PageRank 
References 
3
0.49
8
Authors
2
Name
Order
Citations
PageRank
Tal Moran143925.36
Tyler Moore280866.57