Phishdentity : Leverage Website Favicon to Offset Phishing Website
Phishing attack is a cybercrime which will result in severe financial losses to consumers and entrepreneurs. Typically, the phishers are fond of using fuzzy techniques during the creation of phishing websites. They obfuscate the victims by mimicking the appearance and content of the legitimate we...
| Main Author: | |
|---|---|
| Format: | Thesis |
| Language: | English |
| Published: |
Universiti Malaysia Sarawak, (UNIMAS)
2015
|
| Subjects: | |
| Online Access: | http://ir.unimas.my/id/eprint/10766/ http://ir.unimas.my/id/eprint/10766/2/Jeffrey%20Choo%20Soon%20Faat%20ft.pdf |
| _version_ | 1848836855039000576 |
|---|---|
| author | Choo, Jeffrey Soon Fatt |
| author_facet | Choo, Jeffrey Soon Fatt |
| author_sort | Choo, Jeffrey Soon Fatt |
| building | UNIMAS Institutional Repository |
| collection | Online Access |
| description | Phishing attack is a cybercrime which will result in severe financial losses to consumers and
entrepreneurs. Typically, the phishers are fond of using fuzzy techniques during the creation
of phishing websites. They obfuscate the victims by mimicking the appearance and content of
the legitimate website. In addition, most of the websites are susceptible to the threat of
phishing attacks, including financial institutions, social networks, e-commerce, airline
websites and others. Phishers can easily earn the trust of the victim by impersonating as a
consultant in the travel agency, booking flights and hotel reservations. Therefore, it is
important to establish an intelligent gateway for browsers that can protect internet users from
visiting malicious websites. In this thesis, we proposed an approach which is based on the
website favicon to uncover the hidden identity of a website. We employ Google search by
image engine to obtain the search results specific to the website favicon. Then, we perform
feature extraction based on the search results to retrieve the website identity. Our identity
retrieval technique involves an effective mathematical model in which it could be used to
assist in retrieving the right identity from the many entries of the search results. In addition,
we also proposed additional approach which is based on the URL to examine the legitimacy
of a website. More precisely, we study the URL based on the lexical features, host-based
features and domain features. Additional approach is very useful when the website under
examination does not have a favicon. We have collected a total of 500 phishing websites
from PhishTank and 500 of the legitimate websites from Alexa Top 500 Global Websites to
verify the effectiveness of this approach. From the experimental results, our proposed
technique has achieved 97.4% true positive with only 5.4% false positive. After combining
with additional approach, our proposed technique is able to improve the false positives to
2.2%, while slightly reducing the accuracy of classifying phishing websites where we have
achieved 97% true positive. |
| first_indexed | 2025-11-15T06:30:23Z |
| format | Thesis |
| id | unimas-10766 |
| institution | Universiti Malaysia Sarawak |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T06:30:23Z |
| publishDate | 2015 |
| publisher | Universiti Malaysia Sarawak, (UNIMAS) |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | unimas-107662025-07-01T02:27:21Z http://ir.unimas.my/id/eprint/10766/ Phishdentity : Leverage Website Favicon to Offset Phishing Website Choo, Jeffrey Soon Fatt T Technology (General) Phishing attack is a cybercrime which will result in severe financial losses to consumers and entrepreneurs. Typically, the phishers are fond of using fuzzy techniques during the creation of phishing websites. They obfuscate the victims by mimicking the appearance and content of the legitimate website. In addition, most of the websites are susceptible to the threat of phishing attacks, including financial institutions, social networks, e-commerce, airline websites and others. Phishers can easily earn the trust of the victim by impersonating as a consultant in the travel agency, booking flights and hotel reservations. Therefore, it is important to establish an intelligent gateway for browsers that can protect internet users from visiting malicious websites. In this thesis, we proposed an approach which is based on the website favicon to uncover the hidden identity of a website. We employ Google search by image engine to obtain the search results specific to the website favicon. Then, we perform feature extraction based on the search results to retrieve the website identity. Our identity retrieval technique involves an effective mathematical model in which it could be used to assist in retrieving the right identity from the many entries of the search results. In addition, we also proposed additional approach which is based on the URL to examine the legitimacy of a website. More precisely, we study the URL based on the lexical features, host-based features and domain features. Additional approach is very useful when the website under examination does not have a favicon. We have collected a total of 500 phishing websites from PhishTank and 500 of the legitimate websites from Alexa Top 500 Global Websites to verify the effectiveness of this approach. From the experimental results, our proposed technique has achieved 97.4% true positive with only 5.4% false positive. After combining with additional approach, our proposed technique is able to improve the false positives to 2.2%, while slightly reducing the accuracy of classifying phishing websites where we have achieved 97% true positive. Universiti Malaysia Sarawak, (UNIMAS) 2015 Thesis NonPeerReviewed text en http://ir.unimas.my/id/eprint/10766/2/Jeffrey%20Choo%20Soon%20Faat%20ft.pdf Choo, Jeffrey Soon Fatt (2015) Phishdentity : Leverage Website Favicon to Offset Phishing Website. Masters thesis, Universiti Malaysia Sarawak, (UNIMAS). |
| spellingShingle | T Technology (General) Choo, Jeffrey Soon Fatt Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title | Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title_full | Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title_fullStr | Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title_full_unstemmed | Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title_short | Phishdentity : Leverage Website Favicon to Offset Phishing Website |
| title_sort | phishdentity : leverage website favicon to offset phishing website |
| topic | T Technology (General) |
| url | http://ir.unimas.my/id/eprint/10766/ http://ir.unimas.my/id/eprint/10766/2/Jeffrey%20Choo%20Soon%20Faat%20ft.pdf |