Other formats:
BibTeX
LaTeX
RIS
@inproceedings{16739, author = {Husák, Martin and Čegan, Jakub}, address = {Fribourg, Switzerland}, booktitle = {Availability, Reliability and Security (ARES), 2014 Ninth International Conference on}, keywords = {phishing; PhiGARo; honeypot; CSIRT; IPFIX}, howpublished = {paměťový nosič}, language = {eng}, location = {Fribourg, Switzerland}, isbn = {978-1-4799-4223-7}, pages = {295-302}, publisher = {IEEE}, title = {PhiGARo: Automatic Phishing Detection and Incident Response Framework}, url = {http://dx.doi.org/10.1109/ARES.2014.46}, year = {2014} }
TY - JOUR ID - 16739 AU - Husák, Martin - Čegan, Jakub PY - 2014 TI - PhiGARo: Automatic Phishing Detection and Incident Response Framework PB - IEEE CY - Fribourg, Switzerland SN - 9781479942237 KW - phishing KW - PhiGARo KW - honeypot KW - CSIRT KW - IPFIX UR - http://dx.doi.org/10.1109/ARES.2014.46 N2 - We present a comprehensive framework for automatic phishing incident processing and work in progress concerning automatic phishing detection and reporting. Our work is based upon the automatic phishing incident processing tool PhiGARo which locates users responding to phishing attack attempts and prevents access to phishing sites from the protected network. Although PhiGARo processes the phishing incidents automatically, it depends on reports of phishing incidents from users. We propose a framework which introduces honey pots into the process in order to eliminate the reliance on user input. The honey pots are used to capture e-mails, automatically detect messages containing phishing and immediately transfer them to PhiGARo. There is a need to propagate e-mail addresses of a honey pot to attract phishers. We discuss approaches to the honey pot e-mail propagation and propose a further enhancement to using honey pots in response to phishing incidents. We propose providing phishers with false credentials, accounts and documents that will grant them access to other honey pot services. Tracing these honey tokens may lead us to the originators of the phishing attacks and help investigations into phishing incidents. ER -
HUSÁK, Martin and Jakub ČEGAN. PhiGARo: Automatic Phishing Detection and Incident Response Framework. In \textit{Availability, Reliability and Security (ARES), 2014 Ninth International Conference on}. Fribourg, Switzerland: IEEE, 2014, p.~295-302. ISBN~978-1-4799-4223-7.
|