1. 1 Phinding Phish : Evaluating Anti- Phishing Tools Yue Zhang,Jason Hong (2007) Carnegie Mellon University

2. 2 Topics Problem description Solution approach Evaluation Conclusion

3. 3 Problem description What is Phishing sites? - attempt to obtain personal information through deception users,password, social security numbers, credit card numbers, account usernames (Internet). - phishing usually initiated through “junk e-mail ” What is Anti-Phishing Tools? It’s detection phishing site.

4. 4 Solution approach - eBay, Inc. Using eBay Tool’s. - Google, Inc. Google Safe Browsing for Firefox.. - EarthLink, Inc EarthLink Tool. November - Microsoft,Inc. Internet Explorer 7 Tools. - CallingID,Ltd. CallingID, - Stanford University spoofguard & etc.

5. 5 eBay Tool Firefox Tool IE7 SpoofGuard Tool Tools Bar Anti Phishing Sites

6. 6 Evaluation Catch rate of each tool over time using phishtank.com URLs. Note that SpoofGuard's catch rate is estimated after time 0. phishtank.com

7. 7 Evaluation Catch rate of each tool over time using APWG URLs. Note that SpoofGuard's catch rate is estimated after time 0. APWG URLs

8. 8 Conclusion SpoofGuard - very good at identifying phishing sites - Detect more 90%.of phishing site. - Heuristic methods &Static technique. - Very high false positive rate. - Detection phishing sites in start the same in late time - Must use both Heuristic methods &blacklist. - You must use one tool at least

9. 9 Thanks & Questions