Phishing is a form of social engineering or website forgery whereby attackers mimic a trusted website or public organization or sending e-mails in an automated manner in order to steal sensitive information or credentials of online users. This is done in a way the user does not realize he is in a phishing environment and in turn reveals his sensitive information such as credit card information, employment details, online shopping account passwords and bank information. Phishers are still having their ways to succeed in their various nefarious activities and attacks. Different anti-phishing schemes however have emerged but phishers still find their ways around by breaking through various existing techniques. Against this backdrop, this project aims at developing a web enabled antiphishing technique using enhanced heuristic approach. This technique immediately updates the blacklist if a suspicious website is confirmed as a phishing site otherwise considered legitimate and in turn update the whitelist. This novel anti-phishing eradicates the delay in updating blacklist and whitelist. Users will be able to use this web application at will to test if a site is legitimate or not. This technique was implemented using PHP programming language and Database. A total number of Two Thousand Five Hundred and Nineteen URLs were tested (2519) which is represented as “K” while Two Thousand Five Hundred and Ten (2510) were correctly classified and this is denoted as “k. The results after the implementation show that there was no false negative (a phishing URL that is wrongly classified as legitimate) and one false positive (a legitimate URL wrongly classified as phishing). The rate of false positive and false negative is very low when compared with other techniques. Based on the outcome of this work, it is strongly recommended to any company to avoid comprise and to have a reliable & dependable transaction within an organization.

A Web enabled Anti-phishing solution using enhanced Heuristic based technique

5 Abstract: In todays era, information security is an important aspect in which data is secure from unauthenticated user. Unsuspected victim attacks the information for economic gain, individual gain and for other illegal activities. Phishing is one of them in which unauthenticated person tries to thieve personal confidential information. To avoid these illegal activities we have projected a new paper "An Anti-Phishing Framework Using Visual Cryptography". In this, image is generated which after exploit, decomposed into two shares. One share is kept with user and other with server. And when it requires that is at the time of login at particular site two shares are combined together to form original image. The image form by combining two shares will state that current site is not a Phishing site and also identify that user is authenticated one. So data can be secured from unsuspected person.

/pdf/an-anti-phishing-framework-using-visual-cryptography-qes3h1rqm6.pdf

An Anti-phishing Framework using Visual Cryptography

Phishing on the web pages is an attempt by an individual or a group of hackers seeking to retrieve an individual’s personal private information such as passwords, usernames or confidential information, credit card information etc. In this paper, I am proposing a new approach named as “An Advanced anti phishing approach based on two-tier validation" to solve the problem of phishing. Anti-phishing schemes in the websites presently work on helping users to confirm whether a web site is honest or not. Image and OTP validation along with visual cryptography is a key advantage of this paper. The original image is divided into two blocks and rearrangement can be done and also a One Time Password will be generated. The use of visual cryptography technique((2,2) VCS scheme) is explored to reserve the privacy of image by degenerating the original image into two dissimilar image shares by manipulating the black and white pixel value of the image . Part of the image share and OTP will be stored in the servers such that the original image can be revealed only when both (client, server) of the shares are concurrently available. The individual share images do not reveal the identity of the original image . After the original image is revealed later merging different shares, which can be used as the first tier password and dynamically generated OTP can be used as password in the second tier. Dynamically generating the OTP by the system is one of the major advantages of the system.

An advanced anti phishing approach based on two-tier validation

In the present risky cyber technology era, network security plays a major role to solve the problems of network resources. Network security consists of services and facilities to prevent and monitor the unofficial access, wrong usage, alterations or denial of computer networks. One of the major problems being faced is phishing, which is fraudulently acquiring confidential and sensitive information. These frauds make Anti-phishing Frame work a necessity so that users cannot be tricked by such a combination of spoofing techniques. Our proposed system supports anti-phishing frame work with the help of visual cryptography. This methodology is used in verifying legitimacy of the server-under-test which is a secure anti-phishing approach using image based validation. It involves storing of a secret image in shares and original image can be obtained only by overlapping those shares

http://inpressco.com/wp-content/uploads/2016/01/Paper1051-54.pdf

Anti-Phishing Frame-Work applying Visual Cryptography Mechanism

Data Security is that preventing from unauthorized disclosure and modification. The basic and old method of computer authentication is to use alphanumerical usernames and passwords. This method has been shown to have important drawbacks i.e., These passwords are prone to be stolen and vulnerable to different types of attacks. Then Captcha technology came into existence but again it fails as an individual. Then after graphical password came into existence and has its own drawbacks. This paper provides OTP and image captcha together which provides high security. Keywords— Captcha, Otp, User Authentication.

Providing Security to User Data using OTP and Image CAPTCHA

Anti-phishing schemes in the websites presently work on helping users to confirm whether a web site is honest or not. Phishing on the web pages is an attempt by an individual or a group to threats/hackers seeking to retrieve an individual’s personal private information such as passwords, usernames/confidential information, credit card information etc. In this paper, I am proposing a new approach named as “The secured anti phishing approach using image based validation" to solve the problem of phishing. Textual keyword validation along with visual cryptography is a key advantage of this paper. The original image is divided into many blocks and rearrangement can be done. The use of visual cryptography technique((2,2) VCS scheme) is explored to reserve the privacy of image  by degenerating the original image  into two dissimilar image shares by manipulating the black and white pixel value of the image . Part of the image share will be stored in the servers such that the original image can be revealed only when both (client, server) of the shares are concurrently available. The individual share images do not reveal the identity of the original image . After the original image  is revealed later merging different shares, which can be used as the password. Dynamically generating the  image by the system is one of the major advantages of the system.

Y.Yesu Jyothi

Papers

The Secured Anti Phishing Approach Using Image Based Validation