1. CS 142 Lecture Notes: Security Attacks: Phishing
Phishing s
CS 142 Lecture Notes: Security Attacks: Phishing

2. Obviously Illegitimate
CS 142 Lecture Notes: Security Attacks: Phishing

3. Look-alike Characters
CS 142 Lecture Notes: Security Attacks: Phishing

4. International Character Sets
What does this URL refer to?
This is a host name only!
Chinese characters that look like "/", "?", and "="
CS 142 Lecture Notes: Security Attacks: Phishing

5. CS 142 Lecture Notes: Security Attacks: Phishing
Picture in picture
CS 142 Lecture Notes: Security Attacks: Phishing

6. Legitimate Partners Can Look Fishy
???
???
CS 142 Lecture Notes: Security Attacks: Phishing

7. CS 142 Lecture Notes: Security Attacks: Phishing
HTTPS Indicators
HTTP
HTTPS
Firefox 10
IE 8
Click on fav icon gives pop-up on bottom.
Chrome 17
CS 142 Lecture Notes: Security Attacks: Phishing 7

8. Extended Validation Certificates
CS 142 Lecture Notes: Security Attacks: Phishing

9. Extended Validation Certificates
Normal HTTPS
Firefox 10
IE 8
Click on fav icon gives pop-up on bottom.
Chrome 17
Certificate Authority
CS 142 Lecture Notes: Security Attacks: Phishing 9

10. CS 142 Lecture Notes: Security Attacks: Phishing