MobiFish: A lightweight anti-phishing scheme for mobile phones

Author

Longfei Wu ; Xiaojiang Du ; Jie Wu

Author_Institution

Dept. of Comput. & Inf. Sci., Temple Univ., Philadelphia, PA, USA

fYear

2014

fDate

4-7 Aug. 2014

Firstpage

1

Lastpage

8

Abstract

Recent years have witnessed the increasing threat of phishing attacks on mobile platforms. In fact, mobile phishing is more dangerous due to the limitations of mobile phones and mobile user habits. Existing schemes designed for phishing attacks on computers/laptops cannot effectively address phishing attacks on mobile devices. This paper presents MobiFish, a novel automated lightweight anti-phishing scheme for mobile platforms. MobiFish verifies the validity of web pages and applications (Apps) by comparing the actual identity to the identity claimed by the web pages and Apps. MobiFish has been implemented on the Nexus 4 smartphone running the Android 4.2 operating system. We experimentally evaluate the performance of MobiFish with 100 phishing URLs and corresponding legitimate URLs, as well as fake Facebook Apps. The result shows that MobiFish is very effective in detecting phishing attacks on mobile phones.

Keywords

Android (operating system); smart phones; Android 4.2 operating system; MobiFish; Nexus 4 smartphone; Web pages; automated lightweight antiphishing scheme; fake Facebook Apps; mobile devices; mobile phishing; mobile phones; mobile platforms; mobile user habits; phishing URL; phishing attacks; Browsers; HTML; Mobile communication; Mobile handsets; Optical character recognition software; Superluminescent diodes; Web pages; Android; Mobile phones; phishing attack; security;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer Communication and Networks (ICCCN), 2014 23rd International Conference on

Conference_Location

Shanghai

Type

conf

DOI

10.1109/ICCCN.2014.6911743

Filename

6911743