Does Domain Highlighting Help People Identify Phishing Sites

Simple item page
dc.contributor.authorLin, Ericeng
dc.contributor.authorGreenberg, Sauleng
dc.contributor.authorTrotter, Eileaheng
dc.contributor.authorMa, Davideng
dc.contributor.authorAycock, Johneng
dc.date.accessioned2010-10-05T14:52:52Z
dc.date.available2010-10-05T14:52:52Z
dc.date.issued2010-10-05T14:52:52Z
dc.description.abstractPhishers are fraudsters that mimic legitimate websites to steal user’s credential information and exploit that information for identity theft and other criminal activities. Various anti-phishing techniques attempt to mitigate such attacks. Domain highlighting is one such approach recently incorporated by several popular web browsers. The idea is simple: the domain name of an address is highlighted in the address bar, so that users can inspect it to determine a web site’s legitimacy. Our research asks a basic question: how well does domain highlighting work? To answer this, we showed 22 participants 16 web pages typical of those targeted for phishing attacks, where participants had to determine the page’s legitimacy. In the first round, they judged the page’s legitimacy by whatever means they chose. In the second round, they were directed specifically to look at the address bar. We found that participants fell into 3 types in terms of how they determined the legitimacy of a web page; while domain highlighting was somewhat effective for one user type, it was much less effective for others. We conclude that domain highlighting, while providing some benefit, cannot be relied upon as the sole method to prevent phishing attacks.eng
dc.description.refereedNoeng
dc.identifier.department2010-978-27eng
dc.identifier.doihttp://dx.doi.org/10.11575/PRISM/30676
dc.identifier.urihttp://hdl.handle.net/1880/48207
dc.language.isoengeng
dc.publisher.corporateUniversity of Calgaryeng
dc.publisher.facultyScienceeng
dc.subjectPhishingeng
dc.subjectdomain highlightingeng
dc.subject.otherAnti-phishing techniques,eng
dc.titleDoes Domain Highlighting Help People Identify Phishing Siteseng
dc.typetechnical reporteng
thesis.degree.disciplineComputer Scienceeng
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
2010-978-27.pdf
Size:
422.41 KB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.86 KB
Format:
Item-specific license agreed upon to submission
Description:
Download
Collections
Science Research & Publications