Phishing is a significant problem involving fraudulent email and web sites that trick
unsuspecting users into revealing private information. In this paper, we present the design …

In this paper we describe the design and evaluation of Anti-Phishing Phil, an online game
that teaches users good habits to help them avoid phishing attacks. We used learning …

Computer worms—malicious, self-propagating programs—represent a significant threat to
large networks. One possible defense, containment, seeks to limit a worm's spread by …

In this usability study of phishing attacks and browser anti-phishing defenses, 27 users each
classified 12 web sites as fraudulent or legitimate. By dividing these users into three groups …

We describe a new attack against web authentication, which we call dynamic pharming.
Dynamic pharming works by hijacking DNS and sending the victim's browser malicious …

Keylogging and phishing attacks can extract user identity and sensitive account information
for unauthorized access to users' financial accounts. Most existing or proposed solutions are …

To achieve end-to-end security, traditional machine-to-machine security measures are
insufficient if the integrity of the human-computer interface is compromised. GUI logic flaws …

Identity theft through phishing attacks has become a major concern for Internet users.
Typically, phishing attacks aim at luring the user to a faked Web site to disclose personal …

Phishing, a new-rise identity fraud of this century has already caused huge financial loss
and social disorder. This paper provides an overview of the evolution and forecasted trend …

In this paper, we present the design and prototype of a new approach to cookie
management: if a server deposits a cookie only after authenticating itself via the SSL …