prevention of Phishing Attacks Copyright 2007, BBN Technologies Corp.

Abstract—This paper describes an innovative approach toward defending against phishing attacks by using HTTPS proxying and attribute-based checks. After a short overview of phishing, we describe the functional architecture of the PhishBouncer1 HTTPS proxy together with various deployment options. We then explain a number of anti-phishing algorithms implemented as plugins and highlight which attributes of phishing sites they consider. Next, we describe in detail how the proxy intercepts SSL traffic for HTTPS proxying. To assess the effectiveness and applicability of this prototype, we performed extensive experimental testing. We present a fully automated crawling framework that we developed for testing, along with the main experimental results. I