Chiew, K.L. and Chang, E.H. and Sze, S.N. and Tiong, W.K. (2015) Utilisation of website logo for phishing detection. Computers and Security, 54. pp. 16-26. ISSN 0167-4048Full text not available from this repository.
Phishing is a security threat which combines social engineering and website spoofing techniques to deceive users into revealing confidential information. In this paper, we propose a phishing detection method to protect Internet users from the phishing attacks. In particular, given a website, our proposed method will be able to detect if it is a phishing website. We use a logo image to determine the identity consistency between the real and the portrayed identity of a website. Consistent identity indicates a legitimate website and inconsistent identity indicates a phishing website. The proposed method consists of two processes, namely logo extraction and identity verification. The first process will detect and extract the logo image from all the downloaded image resources of a webpage. In order to detect the right logo image, we utilise a machine learning technique. Based on the extracted logo image, the second process will employ the Google image search to retrieve the portrayed identity. Since the relationship between the logo and domain name is exclusive, it is reasonable to treat the domain name as the identity. Hence, a comparison between the domain name returned by Google with the one from the query website will enable us to differentiate a phishing from a legitimate website. The conducted experiments show reliable and promising results. This proves the effectiveness and feasibility of using a graphical element such as a logo to detect a phishing website.
|Uncontrolled Keywords:||Anti-phishing; Google image search; Identity consistency; Logo extraction; Website identity; Website logo, unimas, university, universiti, Borneo, Malaysia, Sarawak, Kuching, Samarahan, ipta, education, research, Universiti Malaysia Sarawak|
|Subjects:||T Technology > T Technology (General)|
|Divisions:||Academic Faculties, Institutes and Centres > Faculty of Computer Science and Information Technology|
|Depositing User:||Karen Kornalius|
|Date Deposited:||01 Aug 2016 07:56|
|Last Modified:||01 Aug 2016 07:56|
Actions (For repository members only: login required)