NDLI: Gemini: An Emergency Line of Defense against Phishing Attacks

Content Provider	IEEE Xplore Digital Library
Author	Zhang Xu Haining Wang Jajodia, S.
Copyright Year	2014
Abstract	This paper proposes a simple but very effective approach called Gemini to prevent victim users from exposing sensitive credentials to a phishing site. As an emergency line of defense, Gemini assumes that a victim user is already deceived into a phishing site and starts the user authentication procedure. Gemini springs into action once the username field is filled in, and tackles the phishing problem from a new perspective. In particular, by exploiting username input, Gemini is able to provide more accurate detection of a phishing site and much stronger protection for a password, the most confidential and crucial information for user authentication. To validate the efficacy of Gemini, we implement different prototypes of Gemini as a browser extension for IE, Firefox, and Chrome, respectively, and conduct extensive live experiments over various legitimate and phishing websites for more than one month. Our experimental results show that Gemini can achieve zero false negative rate and less than 1% false positive rate, and Gemini can effectively block the access to a phishing site before a victim user begins to enter in a password. Moreover, Gemini is complementary to existing anti-phishing tools. The performance overhead induced by Gemini is minor and has a negligible effect upon users' browsing activities.
Starting Page	11
Ending Page	20
File Size	635975
Page Count	10
File Format	PDF
ISBN	9781479955848
ISSN	10609857
DOI	10.1109/SRDS.2014.26
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-10-06
Publisher Place	Japan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Engines Browsers Electronic mail Authentication Uniform resource locators Educational institutions Phishing Internet Security Web Application
Content Type	Text
Resource Type	Article
Subject	Theoretical Computer Science Computer Networks and Communications Software Hardware and Architecture

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A review on recent phishing attacks in Internet

Phishing defense against IDN address spoofing attacks

Distributed virtual malls on the World Wide Web

Online Detection and Prevention of Phishing Attacks

PwdIP-Hash: A Lightweight Solution to Phishing and Pharming Attacks

Phishing - the threat that still exists

Phishing email detection technique by using hybrid features

A phishing sites blacklist generator

Secured wireless ad-hoc network administration scheme

Gemini: An Emergency Line of Defense against Phishing Attacks

Similar Documents

A review on recent phishing attacks in Internet

Phishing defense against IDN address spoofing attacks

Distributed virtual malls on the World Wide Web

Online Detection and Prevention of Phishing Attacks

PwdIP-Hash: A Lightweight Solution to Phishing and Pharming Attacks

Phishing - the threat that still exists

Phishing email detection technique by using hybrid features

A phishing sites blacklist generator

Secured wireless ad-hoc network administration scheme

Gemini: An Emergency Line of Defense against Phishing Attacks