SmartNotes: Application of crowdsourcing to the detection of web threats

Sharifi, Mehrbod; Fink, Eugene; Carbonell, Jaime G.

doi:10.1109/icsmc.2011.6083845

Cited by 15 publications

(8 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Other attempts have been done by researchers to provide a particular awareness when the users are browsing the internet. Sharifi et al [11], Maurer et al [12] and Potgieter et al [19] proposed a browser extension to make the user aware of the phishing websites and the possible threats while surfing online, whereas Volkamer et al [21] designed a tool to show an awareness notification when the users are browsing insecure websites with password fields. While Karavaras et al [26] and Cetto et al [20] introduced approaches which can provide a tailored awareness for the Facebook users.…”

Section: Discussionmentioning

confidence: 99%

“…A number of studies have focused on mitigating the risk from browsing the Internet. Sharifi et al [11] proposed a browser extension which can help to make users aware of the potential threats when they browse websites. The tool tries to make the user aware of the possible threats at the right time and this depends on the quality of the mutual cooperation between the users as it is a collaborative/ community-based approach.…”

Section: Web Threats Awarenessmentioning

confidence: 99%

See 1 more Smart Citation

A Holistic Information Security Management Framework for Home Users

Alotaibi¹,

Clarke²,

Furnell³

2018

IJICR

View full text Add to dashboard Cite

A wide range of information communication technologies (ICTs), including devices such as smart phones, tablets, desktops and smart TVs, are increasingly used at home. Home users arguably struggle with managing and handling different devices and operating systems, applying different security configurations and mitigating different security threats. This research investigates current online awareness tools and reviews studies which try to enhance cybersecurity awareness and education among the home users. The analysis reveals that most studies have made efforts in proposing "one-fits-all" solutions that do not have the ability to provide the users with a tailored awareness content based on some criteria such as the current needs, prior knowledge, and security priorities for each user. This review indicates that there is a need for an approach that can provide the users with bespoke awareness information. As an initial approach to achieve this goal, a holistic information security management framework for home users is proposed which can provide users with bespoke awareness information by applying different groups of information security policies based on the technologies, applications, and services which are used.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Web Threats Awarenessmentioning

confidence: 99%

A Holistic Information Security Management Framework for Home Users

Alotaibi¹,

Clarke²,

Furnell³

2018

IJICR

View full text Add to dashboard Cite

show abstract

“…mywot.com) aggregates users' ratings on two aspects of Web credibility: trustworthiness and child safety. In academia, similar systems have also been proposed, improving the commercial counterparts in various aspects [22,21,18].…”

Section: Introductionmentioning

confidence: 99%

Towards a highly effective and robust Web credibility evaluation system

Liu

Nielek

Adamska

et al. 2015

Decision Support Systems

View full text Add to dashboard Cite

By leveraging crowdsourcing, Web credibility evaluation systems (WCESs) have become a promising tool to assess the credibility of Web content, e.g., Web pages. However, existing systems adopt a passive way to collect users' credibility ratings, which incurs two crucial challenges: (1) a considerable fraction of Web content have few or even no ratings, so the coverage (or effectiveness) of the system is low; (2) malicious users may submit fake ratings to damage the reliability of the system. In order to realize a highly effective and robust WCES, we propose to integrate recommendation functionality into the system. On the one hand, by fusing Matrix Factorization and Latent Dirichlet Allocation, a personalized Web content recommendation model is proposed to attract users to rate more Web pages, i.e., the coverage is increased. On the other hand, by analyzing a user's reaction to the recommended Web content, we detect imitating attackers, which have recently been recognized as a particular threat to WCES to make the system more robust. Moreover, an adaptive reputation system is designed to motivate users to more actively interact with the integrated recommendation functionality. We conduct experiments using both real datasets and synthetic data to demonstrate how our proposed recommendation components significantly improve the effectiveness and robustness of existing WCES.

show abstract

“…For instance, MyWOT (http:// www.mywot.com/) aggregates individual users' ratings on four aspects of web credibility: Trustworthiness, Vendor reliability, Privacy and Child Safety. In academia, similar systems were also proposed, improving the commercial counterparts from different aspects [15,13]. The performance of such systems is greatly influenced by the reliability of users' ratings.…”

Section: Www 2013 Companionmentioning

confidence: 99%

“…Sharifi et al [15] proposed SmartNotes, a crowdsourcing system (implemented as a browser extension) to detect web security threats such as Internet scams, misleading web information, etc. The main idea is that the users are encouraged to identify and report security threats.…”

Section: Related Workmentioning

confidence: 99%

Defending imitating attacks in web credibility evaluation systems

Liu

Nielek

Wierzbicki

et al. 2013

Proceedings of the 22nd International Conference on World Wide Web

View full text Add to dashboard Cite

Unlike traditional media such as television and newspapers, web contents are relatively easy to be published without being rigorously fact-checked. This seriously influences people's daily life if non-credible web contents are utilized for decision making. Recently, web credibility evaluation systems have emerged where web credibility is derived by aggregating ratings from the community (e.g., MyWOT). In this paper, We focus on the robustness of such systems by identifying a new type of attack scenario where an attacker imitates the behavior of trustworthy experts by copying system's credibility ratings to quickly build high reputation and then attack certain web contents. In order to defend this attack, we propose a two-stage defence algorithm. At stage 1, our algorithm applies supervised learning algorithm to predict the credibility of a web content and compare it with a user's rating to estimate whether this user is malicious or not. In case the user's maliciousness can not be determined with high confidence, the algorithm goes to stage 2 where we investigate users' past rating patterns and detect the malicious one by applying hierarchical clustering algorithm. Evaluation using real datasets demonstrates the efficacy of our approach.

show abstract

SmartNotes: Application of crowdsourcing to the detection of web threats

Cited by 15 publications

References 8 publications

A Holistic Information Security Management Framework for Home Users

A Holistic Information Security Management Framework for Home Users

Towards a highly effective and robust Web credibility evaluation system

Defending imitating attacks in web credibility evaluation systems

Contact Info

Product

Resources

About