Detection of phishing attacks using the anti-phishing framework

• Published in: Scientific Bulletin ("Mircea cel Bătrân" Naval Academy) 2020, Vol.XXIII (1), p.208-212
• Main Authors: Glăvan, Dragoş, Răcuciu, Ciprian, Moinescu, Radu, Eftimie, Sergiu
• Format: Article
• Language: English
• Subjects: Banking; Commerce; Comparative analysis; Comparative studies; Crime; Cybercrime; Cybersecurity; Data; Detection; Electronic commerce; Instant messaging systems; Microprocessors; Network security; Payment systems; Phishing; Security; Surveying
• ISSN: 2392-8956; 1454-864X; 1454-864X; 2392-8956
• DOI: 10.21279/1454-864X-20-I1-028

In the area of computer security, phishing is a form of criminal activity that involves obtaining sensitive data, such as access data for banking applications, e-commerce applications (such as eBay or PayPal) or credit card information, using techniques to manipulate the identity data of a person or institution. A phishing attack consists of sending the attacker an electronic message, using instant messaging software or telephone, in which the user is advised to give his confidential data to win certain prizes, or is informed that they are prizes. necessary due to technical errors that led to the loss of the original data. According to the reports of the AntiPhishing Working Group (APWG) published in December 2018, phishing against banking and the payment processor was high. Almost all phishy URLs use HTTPS and use redirects to avoid detection. This paper is a comparative survey of the available methods for detecting phishing sites. There has been a comparative study of anti-phishing tools and their limitations have been found. An anti-phishing model, a framework to help detect these attacks, is discussed. The identification of this type of attack is a very important problem considering that, at present, people carry out many online transactions regarding money transfer, payment of bills or purchases.