View source

You do not have permission to edit this page, for the following reason:

You can view and copy the source of this page:

==Full Title of Reference== Examining the Impact of Website Take-down on Phishing ==Full Citation== Tyler Moore and Richard Clayton, ''Examining the Impact of Website Take-down on Phishing'', 2nd Annual APWG eCrime Researcher's Summit, Association for Computing Machinery, October, 2007. [http://www.ecrimeresearch.org/2007/proceedings/p1_moore.pdf ''Web''] [http://www.cl.cam.ac.uk/~rnc1/ecrime07.pdf ''AltWeb''] [http://cyber.law.harvard.edu/cybersecurity/Special:Bibliography?f=wikibiblio.bib&title=Special%3ABibliography&view=&action=&keyword=Moore_Clayton%3A2007 ''BibTeX''] ==Categorization== * Threats and Actors: [[Criminals and Criminal Organizations]]; [[Security Targets]] * Issues: [[Cybercrime]]; [[Economics of Cybersecurity]]; [[Information Sharing/Disclosure]]; [[Usability/Human Factors]] * Approaches: [[Technology]] ==Key Words== [[Keyword_Index_and_Glossary_of_Core_Ideas#Credit_Card_Fraud | Credit Card Fraud]], [[Keyword_Index_and_Glossary_of_Core_Ideas#Disclosure_Policy | Disclosure Policy]], [[Keyword_Index_and_Glossary_of_Core_Ideas#Phishing | Phishing]] ==Synopsis== Banks and other organisations deal with fraudulent phishing websites by pressing hosting service providers to remove the sites from the Internet. Until they are removed, the fraudsters learn the passwords, personal identification numbers (PINs) and other personal details of the users who are fooled into visiting them. We analyse empirical data on phishing website removal times and the number of visitors that the websites attract, and conclude that website removal is part of the answer to phishing, but it is not fast enough to completely mitigate the problem. The removal times have a good fit to a lognormal distribution, but within the general pattern there is ample evidence that some service providers are faster than others at removing sites, and that some brands can get fraudulent sites removed more quickly. We particularly examine a major subset of phishing websites (operated by the 'rock-phish' gang) which accounts for around half of all phishing activity and whose architectural innovations have extended their average lifetime. Finally, we provide a ballpark estimate of the total loss being suffered by the banking sector from the phishing websites we observed. ==Additional Notes and Highlights== Expertise Required: Technology - Low [http://people.seas.harvard.edu/~tmoore/ecrime07-pres.pdf Presentation Slides]

Return to Examining the Impact of Website Take-down on Phishing.