GDL

Phishing Websites Detection based on Phishing Characteristics in the Webpage Source Code

ISSN-2223-4985
Journal from gdlhub / 2012-06-22 15:57:00
Oleh : Mona Ghotaish Alkhozae , Omar Abdullah Batarfi , International Journal of Information and Communication Technology Research
Dibuat : 2012-06-22, dengan 1 file

Keyword : phishing, phishing characteristics, w3c standards, webpage source code, secure website weigh.
Url : http://esjournals.org/journaloftechnology/archive/vol1no6/vol1no6_6.pdf
Sumber pengambilan dokumen : Internet

World Wide Web Consortium (W3C) is the international standards organization for the World Wide Web (www). It

develops standards, specifications and recommendations to enhance the interoperability and maximize consensus about the

content of the web and define major parts of what makes the World Wide Web work. Phishing is a type of Internet scams

that seeks to get a user‟s credentials by fraud websites, such as passwords, credit card numbers, bank account details and

other sensitive information. There are some characteristics in webpage source code that distinguish phishing websites from

legitimate websites and violate the w3c standards, so we can detect the phishing attacks by check the webpage and search

for these characteristics in the source code file if it exists or not.

In this paper, we propose a phishing detection approach based on checking the webpage source code, we extract some

phishing characteristics out of the W3C standards to evaluate the security of the websites, and check each character in the

webpage source code, if we find a phishing character, we will decrease from the initial secure weight. Finally we calculate

the security percentage based on the final weight, the high percentage indicates secure website and others indicates the

website is most likely to be a phishing website. We check two webpage source codes for legitimate and phishing websites

and compare the security percentages between them, we find the phishing website is less security percentage than the

legitimate website; our approach can detect the phishing website based on checking phishing characteristics in the webpage

source code.

Deskripsi Alternatif :

World Wide Web Consortium (W3C) is the international standards organization for the World Wide Web (www). It

develops standards, specifications and recommendations to enhance the interoperability and maximize consensus about the

content of the web and define major parts of what makes the World Wide Web work. Phishing is a type of Internet scams

that seeks to get a user‟s credentials by fraud websites, such as passwords, credit card numbers, bank account details and

other sensitive information. There are some characteristics in webpage source code that distinguish phishing websites from

legitimate websites and violate the w3c standards, so we can detect the phishing attacks by check the webpage and search

for these characteristics in the source code file if it exists or not.

In this paper, we propose a phishing detection approach based on checking the webpage source code, we extract some

phishing characteristics out of the W3C standards to evaluate the security of the websites, and check each character in the

webpage source code, if we find a phishing character, we will decrease from the initial secure weight. Finally we calculate

the security percentage based on the final weight, the high percentage indicates secure website and others indicates the

website is most likely to be a phishing website. We check two webpage source codes for legitimate and phishing websites

and compare the security percentages between them, we find the phishing website is less security percentage than the

legitimate website; our approach can detect the phishing website based on checking phishing characteristics in the webpage

source code.

Beri Komentar ?#(0) | Bookmark

Properti	Nilai Properti
ID Publisher	gdlhub
Organisasi	International Journal of Information and Communication Technology Research
Nama Kontak	Herti Yani, S.Kom
Alamat	Jln. Jenderal Sudirman
Kota	Jambi
Daerah	Jambi
Negara	Indonesia
Telepon	0741-35095
Fax	0741-35093
E-mail Administrator	elibrarystikom@gmail.com
E-mail CKO	elibrarystikom@gmail.com