Filters








1 Hit in 0.035 sec

Bypassing Security Toolbars and Phishing Filters via DNS Poisoning

Saeed Abu-Nimeh, Suku Nair
2008 IEEE GLOBECOM 2008 - 2008 IEEE Global Telecommunications Conference  
Security toolbars are used to protect naive users against phishing attacks by displaying warnings on suspicious sites. Recently, web browsers have added built-in phishing filters mimicking the same functionality to detect phishing sites. The present study proposes a new attack to bypass security toolbars and phishing filters via DNS poisoning. Spoofed DNS cache entries are used to forge the results provided to security toolbars and thus misleading information is displayed to the victim.
more » ... the victim. Although there are several studies that demonstrate DNS poisoning attacks, none to our best knowledge, investigate whether such attacks can circumvent security toolbars or phishing filters. Four well-known security toolbars and three reputable browser builtin phishing filters are scrutinized. None of the seven tools detect the attack. Worse still, security toolbars provide the victim with false confirmative indicators that the phishing site is legitimate.
doi:10.1109/glocom.2008.ecp.386 dblp:conf/globecom/Abu-NimehN08 fatcat:75ufgz3y2zhmlomskb6yvido6i