Safeguard against unicode attacks: generation and applications of UC-simlist

ABSTRACT

A severe potential security problem in utilization of Unicode on the Web is identified, which is resulted from the fact that there are many similar characters in the Universal Character Set (UCS). The foundation of our solution relies on evaluating the similarity of characters in UCS. We develop a solution based on the renowned Kernel Density Estimation (KDE) method to establish such a Unicode Similarity List (UC-SimList).

REFERENCES

• 1: Anti-Phishing Group of City University of Hong Kong, http://antiphishing.cs.cityu.edu.hk
• 2: Thomas M. Cover , Joy A. Thomas, Elements of information theory, Wiley-Interscience, New York, NY, 1991
• 3: Duerst M., Suignard M., RFC 3987: Internationalized Resource Identifiers (IRIs), The Internet Society, 2005.
• 4: Evgeniy Gabrilovich , Alex Gontmakher, The homograph attack, Communications of the ACM, v.45 n.2, February 2002 [doi>10.1145/503124.503156]
• 5: Fu A. Y., Deng X., Liu W., A Potential IRI based Phishing Strategy, WISE2005, LNCS Vol. 3806, pp. 618--619, 2005
• 6: Wenyin Liu , Xiaotie Deng , Guanglin Huang , Anthony Y. Fu, An Antiphishing Strategy Based on Visual Similarity Assessment, IEEE Internet Computing, v.10 n.2, p.58-65, March 2006 [doi>10.1109/MIC.2006.23]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Legal Aspects, Security, Verification

Keywords:
phishing, secure web identity, unicode