Online detection and prevention of phishing attacks

Abstract

Phishing is a new type of network attack where the attacker creates a faked web page to fool users into submitting personal information. The phishing data archive provided by APWG were analyzed firstly, and then a new end-host based anti-phishing algorithm, LinkGuard was proposed. LinkGuard can detect both known and unknown phishing attacks. Our implementation of LinkGuard in Windows XP has verified that it successfully detects 195 out of the 203 phishing attacks. The experiments also show that LinkGuard is lightweighted and can detect and prevent phishing attacks in real-time.