JSQ
Talks
[up]
[prev] [next]
a persistent phishing cluster
   NCFS,
   Orlando
   2 Nov
   2006
F2CCamp
   Austin
   26 September
   2006
IEEE
   Net Neutrality
   Austin
   21 September
   2006
Armadillocon,
   Austin
   12 August
   2006
Metricon,
   Vancouver
   1 Aug
   2006
Agora,
   Seattle
   16 June
   2006
RSNZ,
   Wellington
   17 Nov
   2005
TRISC,
   Austin
   20 Sep
   2005
APWG,
   London
   19 April
   2005
RSA
   San Francisco
   17 Feb
   2005
InnoTech
   Austin
   3 Nov
   2004
LinuCon
   Austin
   9 Oct
   2004
Internet2
   Austin
   29 Sep
   2004
Supernova
   Santa Clara
   24 June
   2004
SXSW 20040315
   SXSW
   Austin
   15 March
   2004
CACTUS
   Austin
   18 Sep
   2003
TPRC
   Arlington,
   VA
   19-21 Sept
   2003
AIP
   Austin
   18 June
   2003
EFF
   Austin
   15 April
   2003
NGN,
   Boston,
   14-18
   Oct
   2002
MIT
   Wireless
   Forum,
   NYC,
   15 Oct
   2002
TPRC,
   VA,
   28-30
   Sep
   2002
DCSB,
   Boston,
   4 June
   2002
 

Anti-Phishing Working Group: Visualization for Data Sharing, 19 April 2005

John S. Quarterman, InternetPerils, Inc. Jay Swofford, Jim Maloney, Corillian London, 19 April 2005

Abstract

According to the BBC (22 March), the U.K. leads the world in hijacked zombie PCs. For phishing early warning we visualize the planning and setup phases before attack of the undead horde, and for forensics we follow through the collection, fraud, and post-attack phases. We analyze a database of addresses from multiple sources of data, and enhance it with rules of behavior, visual inspection, and data mining, producing reports to shareholders such as the examples in this presentation, which show misleading domains and clusters of addresses by country and service provider.

Slides


Last changed: $Date: 2005/06/03 12:52:10 $ JSQ