Computer Science > Cryptography and Security
[Submitted on 21 Sep 2009 (this version), latest version 13 Jan 2012 (v4)]
Title:Harvesting SSL Certificate Data to Mitigate Web-Fraud
View PDFAbstract: Web-fraud is one of the most unpleasant features of today's Internet. Two eminent examples of web-fraudulent activities are phishing and typosquatting. Phishing aims to elicit sensitive information from users by presenting them with mock-ups of legitimate web sites. Typosquatting is the nefarious practice of fielding web sites with names closely resembling those of legitimate and popular Internet destinations. Effects range from relatively benign (such as unwanted or unexpected ads) to downright sinister (especially, when typosquatting is combined with phishing).
Prior work has assessed the risks of phishing and typosquatting and even attempted to profile and mitigate them. However, the problem remains largely unsolved. This paper presents a novel technique to detect web-fraud domains that utilize HTTPS. To achieve this, we conduct the first comprehensive study of SSL certificates for legitimate and popular domains, as opposed to those used for web-fraud. Drawing from extensive measurements, we build a classifier that detects malicious domains with high accuracy. We validate our methodology with large amounts of data collected from the Internet. Our prototype is orthogonal to existing mitigation techniques and can be integrated with other available solutions. Our work shows that, besides its intended benefits of confidentiality and authenticity, the use of HTTPS can help mitigate web-fraud.
Submission history
From: Karim El Defrawy [view email][v1] Mon, 21 Sep 2009 05:39:17 UTC (231 KB)
[v2] Tue, 15 Dec 2009 02:19:53 UTC (240 KB)
[v3] Thu, 12 Jan 2012 03:15:29 UTC (1,044 KB)
[v4] Fri, 13 Jan 2012 03:55:04 UTC (95 KB)
Bibliographic and Citation Tools
Bibliographic Explorer (What is the Explorer?)
Litmaps (What is Litmaps?)
scite Smart Citations (What are Smart Citations?)
Code, Data and Media Associated with this Article
CatalyzeX Code Finder for Papers (What is CatalyzeX?)
DagsHub (What is DagsHub?)
Gotit.pub (What is GotitPub?)
Papers with Code (What is Papers with Code?)
ScienceCast (What is ScienceCast?)
Demos
Recommenders and Search Tools
Influence Flower (What are Influence Flowers?)
Connected Papers (What is Connected Papers?)
CORE Recommender (What is CORE?)
arXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.