Protection AgainstWeb-based Password Phishing

The increase in the number of phishing attacks goes to show that the current secure socket layer (SSL) is insufficient to protect users against fraudulent Web sites. In this paper, we discuss some of the current phishing attacks and the limitations/weaknesses of the current SSL protocol. Next, we propose an ID-based SSL protocol to overcome the limitations/weaknesses of current SSL and offer better protection for users against phishing attacks. We show in the security analysis how our protocol prevents phishing attacks that are difficult to detect, even for experienced and well-educated users