NDLI: Fighting Phishing with Trusted Email

Please wait, while we are loading the content...

2015 10th International Conference on Availability, Reliability and Security

2014 Ninth International Conference on Availability, Reliability and Security

2013 International Conference on Availability, Reliability and Security

2012 Seventh International Conference on Availability, Reliability and Security

2011 Sixth International Conference on Availability, Reliability and Security

2010 International Conference on Availability, Reliability and Security

Table of Contents

Welcome Message from ARES 2010 Chairs

Welcome Message from ARES 2010 Workshop Co-Chair

ARES 2010 Conference Officers

ARES 2010 Reviewer List

OSA 2010 Reviewer List

SecSE 2010 Organization

SPattern 2010 Organization Committee

WAIS 2010 Reviewers

A Security Decision-Reaction Architecture for Heterogeneous Distributed Network

Dual-Level Attack Detection and Characterization for Networks under DDoS

Improving Effectiveness of Intrusion Detection by Correlation Feature Selection

Analytical Approach to Attack Graph Analysis for Network Security

Affects of Queuing Mechanisms on RTP Traffic: Comparative Analysis of Jitter, End-to-End Delay and Packet Loss

A Computer Architecture with Hardwarebased Malware Detection

Solving the Transitive Access Problem for the Services Oriented Architecture

Unified Public Key Infrastructure Supporting Both Certificate-Based and ID-Based Cryptography

Secure Bindings of SAML Assertions to TLS Sessions

From Contextual Permission to Dynamic Pre-obligation: An Integrated Approach

2-clickAuth Optical Challenge-Response Authentication

Architecture-Aware Adaptive Deployment of Contextual Security Policies

Using Smart Cards for Tamper-Proof Timestamps on Untrusted Clients

A Semi-Markov Survivability Evaluation Model for Intrusion Tolerant Database Systems

FaT2D: Fault Tolerant Directed Diffusion for Wireless Sensor Networks

An Adaptive Redundancy Oriented Method to Tolerate Soft Errors in SRAM-Based FPGAs Using Unused Resources

Analysis of Transient Faults on a MIPS-Based Dual-Core Processor

Visualizing Past Personal Data Disclosures

Strategies for Reducing Risks of Inconsistencies in Access Control Policies

Multi-dimensional Uncertainty Analysis in Secure and Dependable Domain

Information Flow in Disaster Management Systems

Formal Specification and Analysis of an E-voting System

Towards a Privacy-Enhanced Social Networking Site

A Formal Approach Towards Risk-Aware Service Level Analysis and Planning

Threat- and Risk-Analysis During Early Security Requirements Engineering

An Analysis of Information Security Awareness within Home and Work Environments

Trust Based Multi Path DSR Protocol

Enhanced Chaotic Stream Cipher for WSNs

Zone Based Systems Design Framework for the Realisation of Efficient Block Cipher Based Message Authentication Code Algorithms

A Semantic Security Architecture for Web Services The Access-eGov Solution

FedWare: Middleware Services to Cope with Information Consistency in Federated Identity Management

Owner-Based Role-Based Access Control OB-RBAC

Program Obfuscation by Strong Cryptography

Pitfalls in Formal Reasoning about Security Protocols

Secure Group Communication Using Fractional Public Keys

Extending the Gordon and Loeb Model for Information Security Investment

Risk-Based Methodology for Real-Time Security Monitoring of Interdependent Services in Critical Infrastructures

Planning Dynamic Activity and Resource Allocations Using a Risk-Aware Business Process Management Approach

Security and Usability: Analysis and Evaluation

Recovery of Skype Application Activity Data from Physical Memory

Rejuvenating High Available Virtualized Systems

Detection of Spyware by Mining Executable Files

A Probabilistic Approach for On-Line Sum-Auditing

Towards an Ontology-Based Solution for Managing License Agreement Using Semantic Desktop

Optimising IDS Sensor Placement

Layered Higher Order N-grams for Hardening Payload Based Anomaly Intrusion Detection

Improving Network Intrusion Detection by Means of Domain-Aware Genetic Programming

On the Simulation of a Software Reputation System

Model-Driven Application-Level Encryption for the Privacy of E-health Data

Communal Reputation and Individual Trust (CRIT) in Wireless Sensor Networks

A Multi-stage Methodology for Ensuring Appropriate Security Culture and Governance

Development of ICT Infrastructure for Local Socio-Economic System in Japan Another Approach Toward Cybersecurity in the Non-urban Area

A National Strategy for an Effective Cybersecurity Approach and Culture

Choosing Authentication Techniques in E-procurement System in Serbia

A Continuous Authentication System Based on User Behavior Analysis

Identifying Security Relevant Warnings from Static Code Analysis Tools through Code Tainting

Reselling Digital Content

A New DRM Architecture with Strong Enforcement

A Secure and Scalable Grid-Based Content Management System

A Design Pattern for Event-Based Processing of Security-Enriched SOAP Messages

Challenging IS and ISM Standardization for Business Benefits

Managing the Asset Risk of SMEs

A Generic Metamodel for IT Security Attack Modeling for Distributed Systems

Combining Misuse Cases with Attack Trees and Security Activity Models

External Insider Threat: A Real Security Challenge in Enterprise Value Webs

Secure Monitoring of Service Level Agreements

Fighting Phishing with Trusted Email

Application and Economic Implications of an Automated Requirement-Oriented and Standard-Based Compliance Monitoring and Reporting Prototype

A Taxonomy Refining the Security Requirements for Electronic Voting: Analyzing Helios as a Proof of Concept

Secured Key Distribution Scheme for Cryptographic Key Management System

One Size Fits None: The Importance of Detector Parameterization

Supporting Authorization Policy Modification in Agile Development of Web Applications

The Road to Hell is Paved with Good Intentions: A Story of (In)secure Software Development

Katana: A Hot Patching Framework for ELF Executables

Investigating the Limitations of Java Annotations for Input Validation

Classification of Buffer Overflow Vulnerability Monitors

Configuration Fuzzing for Software Vulnerability Detection

Practical Experience Gained from Modeling Security Goals: Using SGITs in an Industrial Project

Security Modeling and Tool Support Advantages

Analysing and Visualising Security and Usability in IRIS

Security and Performance Aspects of an Agent-Based Link-Layer Vulnerability Discovery Mechanism

Model-Driven Security Patterns Application Based on Dependences among Patterns

Refining the Pattern-Based Reference Model for Electronic Invoices by Incorporating Threats

Measuring the Level of Security Introduced by Security Patterns

Patterns for Secure Boot and Secure Storage in Computer Systems

A Consideration of the Reliability of Registration and Attribute Exchange

Binomial-Mix-Based Location Anonymizer System with Global Dummy Generation to Preserve User Location Privacy in Location-Based Services

Multiple Designated Verifiers Signatures Reconsidered

LSM-Based Secure System Monitoring Using Kernel Protection Schemes

Formalization of Viruses and Malware Through Process Algebras

Heuristics for Detecting Botnet Coordinated Attacks

An Improvement of Robustness Against Physical Attacks and Equipment Independence in Information Hiding Based on the Artificial Fiber Pattern

Large Scale Demonstration Experiments Towards Acheiving Practical Traceback on the Internet

Quantum Detection of Wavelength Division Multiplexing Optical Coherent Signals in Lossy Channels

Experimental Results on Cheon's Algorithm

The "Explore, Investigate and Correlate' (EIC) Conceptual Framework for Digital Forensics Information Visualisation

A Model for Computer Profiling

Using Normalized Compression Distance for Classifying File Fragments

A Multi-component View of Digital Forensics

Blind Steganalysis: A Countermeasure for Binary Image Steganography

Log Analysis Towards an Automated Forensic Diagnosis System

A Function Oriented Methodology to Validate and Verify Forensic Copy Function of Digital Forensic Tools

A Complexity Based Model for Quantifying Forensic Evidential Probabilities

A Framework to Guide the Implementation of Proactive Digital Forensics in Organisations

Estimating Hidden Message Length in Binary Image Embedded by Using Boundary Pixels Steganography

Information Flow Control Using the Java Virtual Machine Tool Interface (JVMTI)

A Prototype for Support of Computer Forensic Analysis Combined with the Expected Knowledge Level of an Attacker to More Efficiently Achieve Investigation Results

A Novel Image Hiding Scheme Using Content Aware Seam Carving Method

Publisher Information

2009 International Conference on Availability, Reliability and Security

2008 Third International Conference on Availability, Reliability and Security

The Second International Conference on Availability, Reliability and Security (ARES'07)

First International Conference on Availability, Reliability and Security (ARES'06)

Fighting Phishing with Trusted Email

Content Provider	IEEE Xplore Digital Library
Author	Crain, J. Opyrchal, L. Prakash, A.
Copyright Year	2010
Abstract	Phishing is the combination of social engineering and technical exploits designed to convince a victim to provide personal information, usually for the monetary gain of the attacker (phisher). Attempts to stop phishing by preventing a user from interacting with a malicious web site have shown to be ineffective. We introduce a method to aid in the prevention of phishing by combining automatic and transparent email signing with an email client plugin. The plugin can detect unsigned spoofed messages. In this manner, the user is prevented (or at least discouraged) from visiting malicious web sites, thus stopping the data-gathering phase of the phishing attack before it begins. We describe the system, implementation, weaknesses, and our ongoing user experiments.
Starting Page	462
Ending Page	467
File Size	355717
Page Count	6
File Format	PDF
ISBN	9781424458790
e-ISBN	9781424458806
DOI	10.1109/ARES.2010.98
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-02-15
Publisher Place	Poland
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Availability phishing Target recognition Reliability engineering privacy Electronic mail Design engineering Privacy Information security Internet spam State estimation Viruses (medical) email
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in