A Review of Human- and Computer-Facing URL Phishing Features

Kholoud Althobaiti; Ghaidaa Rummani; Kami Vaniea

doi:10.1109/EuroSPW.2019.00027

A Review of Human- and Computer-Facing URL Phishing Features

Kholoud Althobaiti, Ghaidaa Rummani, Kami Vaniea

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

When detecting phishing websites, both humans and computers rely on aspects of the website (features) to aid in their decision making. In this work, we conduct a review of URL-based phishing features that appear in publications targeting humanfacing and automated anti-phishing approaches. We focus on both humans and computers to obtain a more comprehensive feature list and create a cross-community foundation for future research. We reviewed 94 papers and categorise their features into: lexical, host, rank, redirection, certificate, search engine, and black/white lists. We find that research on automation has used all feature
categories but several, such as host-based features (e.g. DNS), are minimally explored in human-facing anti-phishing research.

Original language	English
Title of host publication	2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)
Place of Publication	Stockholm, Sweden
Publisher	Institute of Electrical and Electronics Engineers
Pages	182-191
Number of pages	10
ISBN (Electronic)	978-1-7281-3026-2
ISBN (Print)	978-1-7281-3027-9
DOIs	https://doi.org/10.1109/EuroSPW.2019.00027
Publication status	Published - 19 Aug 2019
Event	4th European Workshop on Usable Security - Stockholm, Sweden Duration: 20 Jun 2019 → 20 Jun 2019 https://eusec.cs.uchicago.edu/

Workshop

Workshop	4th European Workshop on Usable Security
Abbreviated title	EuroUSEC 2019
Country/Territory	Sweden
City	Stockholm
Period	20/06/19 → 20/06/19
Internet address	https://eusec.cs.uchicago.edu/

Keywords / Materials (for Non-textual outputs)

phishing
phishing features
phishing education
usable security

Access to Document

10.1109/EuroSPW.2019.00027

A Review of Human_ALTHOBAITI_DoA050419_AFVAccepted author manuscript, 198 KB

https://ieeexplore.ieee.org/document/8802422

A Survey on Developer-Centred Security - Literature Review of Publications on Security Studies
Tahaei, M. (Creator) & Vaniea, K. (Creator), Edinburgh DataShare, 18 Apr 2019
DOI: 10.7488/ds/2535
Dataset

Cite this

@inproceedings{804580a7ab4d4687bf4bef3cf70707b1,

title = "A Review of Human- and Computer-Facing URL Phishing Features",

abstract = "When detecting phishing websites, both humans and computers rely on aspects of the website (features) to aid in their decision making. In this work, we conduct a review of URL-based phishing features that appear in publications targeting humanfacing and automated anti-phishing approaches. We focus on both humans and computers to obtain a more comprehensive feature list and create a cross-community foundation for future research. We reviewed 94 papers and categorise their features into: lexical, host, rank, redirection, certificate, search engine, and black/white lists. We find that research on automation has used all feature categories but several, such as host-based features (e.g. DNS), are minimally explored in human-facing anti-phishing research.",

keywords = "phishing, phishing features, phishing education, usable security",

author = "Kholoud Althobaiti and Ghaidaa Rummani and Kami Vaniea",

year = "2019",

month = aug,

day = "19",

doi = "10.1109/EuroSPW.2019.00027",

language = "English",

isbn = "978-1-7281-3027-9",

pages = "182--191",

booktitle = "2019 IEEE European Symposium on Security and Privacy Workshops (EuroS\&PW)",

publisher = "Institute of Electrical and Electronics Engineers",

address = "United States",

note = "4th European Workshop on Usable Security, EuroUSEC 2019 ; Conference date: 20-06-2019 Through 20-06-2019",

url = "https://eusec.cs.uchicago.edu/",

}

Althobaiti, K, Rummani, G & Vaniea, K 2019, A Review of Human- and Computer-Facing URL Phishing Features. in 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW). Institute of Electrical and Electronics Engineers, Stockholm, Sweden, pp. 182-191, 4th European Workshop on Usable Security, Stockholm, Sweden, 20/06/19. https://doi.org/10.1109/EuroSPW.2019.00027

TY - GEN

T1 - A Review of Human- and Computer-Facing URL Phishing Features

AU - Althobaiti, Kholoud

AU - Rummani, Ghaidaa

AU - Vaniea, Kami

PY - 2019/8/19

Y1 - 2019/8/19

N2 - When detecting phishing websites, both humans and computers rely on aspects of the website (features) to aid in their decision making. In this work, we conduct a review of URL-based phishing features that appear in publications targeting humanfacing and automated anti-phishing approaches. We focus on both humans and computers to obtain a more comprehensive feature list and create a cross-community foundation for future research. We reviewed 94 papers and categorise their features into: lexical, host, rank, redirection, certificate, search engine, and black/white lists. We find that research on automation has used all feature categories but several, such as host-based features (e.g. DNS), are minimally explored in human-facing anti-phishing research.

AB - When detecting phishing websites, both humans and computers rely on aspects of the website (features) to aid in their decision making. In this work, we conduct a review of URL-based phishing features that appear in publications targeting humanfacing and automated anti-phishing approaches. We focus on both humans and computers to obtain a more comprehensive feature list and create a cross-community foundation for future research. We reviewed 94 papers and categorise their features into: lexical, host, rank, redirection, certificate, search engine, and black/white lists. We find that research on automation has used all feature categories but several, such as host-based features (e.g. DNS), are minimally explored in human-facing anti-phishing research.

KW - phishing

KW - phishing features

KW - phishing education

KW - usable security

U2 - 10.1109/EuroSPW.2019.00027

DO - 10.1109/EuroSPW.2019.00027

M3 - Conference contribution

SN - 978-1-7281-3027-9

SP - 182

EP - 191

BT - 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

PB - Institute of Electrical and Electronics Engineers

CY - Stockholm, Sweden

T2 - 4th European Workshop on Usable Security

Y2 - 20 June 2019 through 20 June 2019

ER -

A Review of Human- and Computer-Facing URL Phishing Features

Abstract

Workshop

Keywords / Materials (for Non-textual outputs)

Access to Document

Fingerprint

Datasets

A Survey on Developer-Centred Security - Literature Review of Publications on Security Studies

Cite this