Phishing environments, techniques, and countermeasures: A survey
Phishing environments, techniques, and countermeasures: A survey
复制标题
DOI：
10.1016/j.cose.2017.04.006
复制
发表时间：
2017-07-01
影响因子：
5.6
通讯作者：
Zhou, Lina
中科院分区：
文献类型：
--
作者：
Aleroud, Ahmed;Zhou, Lina
网络钓鱼已成为在线空间中日益严重的威胁，这主要是由不断发展的Web、移动的和社交网络技术驱动的。以前的网络钓鱼分类主要集中在网络钓鱼的基本机制，但忽略了新兴的攻击技术，有针对性的环境，以及减轻新的网络钓鱼类型的对策。本调查不仅调查了电子邮件和网站等传统环境中的网络钓鱼攻击和反网络钓鱼技术，还调查了移动的和社交网站等新环境中的网络钓鱼攻击和反网络钓鱼技术。以网络钓鱼的综合观点，我们提出了一个分类，涉及攻击技术，对策，有针对性的环境和通信介质。该分类法不仅将为在各种类型的环境中设计有效的网络钓鱼检测和预防技术提供指导，而且还有助于从业人员评估和选择用于处理特定类型网络钓鱼问题的工具、方法和功能。(C)2017爱思唯尔有限公司版权所有
Phishing has become an increasing threat in online space, largely driven by the evolving web, mobile, and social networking technologies. Previous phishing taxonomies have mainly focused on the underlying mechanisms of phishing but ignored the emerging attacking techniques, targeted environments, and countermeasures for mitigating new phishing types. This survey investigates phishing attacks and anti-phishing techniques developed not only in traditional environments such as e-mails and websites, but also in new environments such as mobile and social networking sites. Taking an integrated view of phishing, we propose a taxonomy that involves attacking techniques, countermeasures, targeted environments and communication media. The taxonomy will not only provide guidance for the design of effective techniques for phishing detection and prevention in various types of environments, but also facilitate practitioners in evaluating and selecting tools, methods, and features for handling specific types of phishing problems. (C) 2017 Elsevier Ltd. All rights reserved.