PhishZoo: An Automated Web Phishing Detection Approach Based on Profiling and Fuzzy Matching

From Anita Borg Institute Wiki

Presenter: Sadia Afroz (Drexel University)

Phishing is a web-based attack that exploits users to acquire sensitive data. Most phishing attacks work by creating a fake version of the real site's web interface to gain the user's trust. This paper proposes a phishing detection approach--PhishZoo---that uses profiles of trusted websites' appearances built with fuzzy hashing to detect phishing. PhishZoo provides similar accuracy to blacklisting approaches, with the advantage of classifying new targeted attacks against smaller sites.