Humboldt: A distributed phishing disruption system

Knickerbocker, Paul; Yu, Dongting; Li, Jun

doi:10.1109/ecrime.2009.5342620

Cited by 10 publications

(3 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Base64 encoding is a form of encoding data into an ASCII string of characters, so that it can be securely and safely sent along a transmission line that deals primarily with text [8]. This can be used within a web based PHP program to obfuscate the code of the program, so that it is less understandable by humans.…”

Section: Base64 Encodingmentioning

confidence: 99%

Detecting Anonymising Proxy Usage on the Internet

O’Flaherty

Curran

2013

Wireless Pers Commun

View full text Add to dashboard Cite

Anonymising proxies are a growing problem for organisations as more people become aware of their capabilities. These proxy sites enable users to bypass the network's filtering system leaving the network open to banned content and harmful threats. Network administrators do try to block these online proxy sites, but with a growing number of new sites created, this task is not a trivial one. Many existing solutions rely almost entirely on Access Control Lists, which blacklist undesirable websites; the end result being that many users learn that anonymous proxies allow them to easily bypass this filtering. While Access Control Lists serve a purpose, there are lots of difficulties especially in detecting if users are circumventing the policies and Access Control Lists. One possible solution is to focus on detecting access to anonymous proxies. This paper outlines procedures required to discover anonymous proxies on the Internet.

show abstract

Section: Base64 Encodingmentioning

confidence: 99%

Detecting Anonymising Proxy Usage on the Internet

O’Flaherty

Curran

2013

Wireless Pers Commun

View full text Add to dashboard Cite

show abstract

“…With the rapid development and popularization of the computer network technology, while bringing convenience to people's lives, the corresponding computer crime also showed a rising trend year by year. Intruding the website is one of the very important intrusions, especially for the intrusion websites of government, bank and others [1]. The light is bringing inconvenience to people's life, the heavy is serious damage to national security and people's property security.…”

Section: Introductionmentioning

confidence: 99%

Construction and Analysis of Website Intrusion Forensics Model

Chen

Liu

2014

AMM

View full text Add to dashboard Cite

According to the website security and judicial forensics demands, a new Website Intrusion Forensics Model is proposed foe research. The model can discovery the website intrusion and forensic in time. This paper first describes the overall structure of the model, then according to the various types of intrusion websites. Put forward a comprehensive and detailed design plan about Data acquisition, transmission, preprocessing, storage, analysis, data control and user view module.

show abstract

“…The underground economics based on Internet scams and frauds is also booming. Attackers increasingly initiate e-crime attacks and abuses [1][2][3][4][5] , such as spam, phishing attacks, and Internet worms. Firewalls, Intrusion Detection Systems (IDS), and Anti-Virus Gateway are now widely deployed in edge networks to protect end-systems from attack.…”

Section: Introductionmentioning

confidence: 99%

Cloud computing-based forensic analysis for collaborative network security management system

Chen

Han

Cao

et al. 2013

Tinshhua Sci. Technol.

View full text Add to dashboard Cite

Internet security problems remain a major challenge with many security concerns such as Internet worms, spam, and phishing attacks. Botnets, well-organized distributed network attacks, consist of a large number of bots that generate huge volumes of spam or launch Distributed Denial of Service (DDoS) attacks on victim hosts. New emerging botnet attacks degrade the status of Internet security further. To address these problems, a practical collaborative network security management system is proposed with an effective collaborative Unified Threat Management (UTM) and traffic probers. A distributed security overlay network with a centralized security center leverages a peer-to-peer communication protocol used in the UTMs collaborative module and connects them virtually to exchange network events and security rules. Security functions for the UTM are retrofitted to share security rules. In this paper, we propose a design and implementation of a cloud-based security center for network security forensic analysis. We propose using cloud storage to keep collected traffic data and then processing it with cloud computing platforms to find the malicious attacks. As a practical example, phishing attack forensic analysis is presented and the required computing and storage resources are evaluated based on real trace data. The cloudbased security center can instruct each collaborative UTM and prober to collect events and raw traffic, send them back for deep analysis, and generate new security rules. These new security rules are enforced by collaborative UTM and the feedback events of such rules are returned to the security center. By this type of close-loop control, the collaborative network security management system can identify and address new distributed attacks more quickly and effectively.

show abstract

Humboldt: A distributed phishing disruption system

Cited by 10 publications

References 5 publications

Detecting Anonymising Proxy Usage on the Internet

Detecting Anonymising Proxy Usage on the Internet

Construction and Analysis of Website Intrusion Forensics Model

Cloud computing-based forensic analysis for collaborative network security management system

Contact Info

Product

Resources

About