JP2007323640A - フィッシング検知方法及びシステム - Google Patents
フィッシング検知方法及びシステム Download PDFInfo
- Publication number
- JP2007323640A JP2007323640A JP2007136136A JP2007136136A JP2007323640A JP 2007323640 A JP2007323640 A JP 2007323640A JP 2007136136 A JP2007136136 A JP 2007136136A JP 2007136136 A JP2007136136 A JP 2007136136A JP 2007323640 A JP2007323640 A JP 2007323640A
- Authority
- JP
- Japan
- Prior art keywords
- address
- list
- addresses
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/212—Monitoring or handling of messages using filtering or selective blocking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1483—Countermeasures against malicious traffic service impersonation, e.g. phishing, pharming or web spoofing
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Information Transfer Between Computers (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
【解決手段】受信メール(210)のソースコード(215)、受信者向けテキスト(220)及びソースコード内メール記載アドレスリスト(225)を取得し、各メール記載アドレス(230)に視覚的文字正規化処理を施し全類似アドレスを含む正規化アドレスのリストを生成し(235)、そのリストからメール記載アドレス自体を除外して変形アドレスのリストを生成し(240)、各メール記載アドレスが(230)各変形アドレスから見て(245)真正か否かを比較試験により判別し(250)、不正なら受信者にそのメールの詐欺容疑を知らせ(270)、全メール記載アドレスが(260)どの変形アドレスから見ても(255)真正なら受信者にそのメールが真正だと知らせる(265)という手順で、フィッシングを狙った電子メールを自動検知及び識別する。
【選択図】図2
Description
[数1]
「1」(ASCIIコード49) 対 「l」(ASCIIコード108)の相互変換
「|」(ASCIIコード124)対 「l」(ASCIIコード108)の相互変換
「0」(ASCIIコード48) 対 「o」(ASCIIコード111)の相互変換
……
で表される変換則となる。
[数2]
Unicodeキリル文字「а」(U0430)及びラテン文字「a」(U0061)をASCII文字「a」に変換
Unicodeキリル文字「е」(U0435)及びラテン文字「e」(U0065)をASCII文字「e」に変換
Unicodeギリシャ文字「α」(U03B1)及びラテン文字「a」(U0061)をASCII文字「a」に変換
……
で表される変換則となる。
Claims (4)
- 電子メールサーバ及び複数台のパーソナルコンピュータを含むネットワーク接続環境にてフィッシングを狙った電子メールを受信時に検知する方法であって、
アドレスが記載されている電子メールを受信するステップと、
受信した電子メールのソースコードを取得するステップと、
その電子メールの受信者向け表示テキストを取得するステップと、
取得したソースコードから全てのメール記載アドレスを取得しリスト化するステップと、
各メール記載アドレスに視覚的な文字正規化処理を施すことにより網羅的に変形アドレス候補を求め正規化アドレスリストを生成するステップと、
生成した正規化アドレスリストからメール記載アドレスを除外して変形アドレスからなるリストを生成するステップと、
受信した電子メールの不正性を判別するため変形アドレスに基づく比較試験を実行するステップと、
その比較試験により不正性が判明したときに、受信した電子メールに詐欺メールの疑いがあることを知らせるメッセージを受信者に送るステップと、
ある変形アドレスに基づく比較試験により不正性が判明しなかったときに、他の変形アドレスについてもその比較試験を実施するステップと、
全変形アドレスについて比較試験を行っても不正性が判明しなかったときに、受信した電子メールが真正であり受け入れうることを受信者に知らせるステップと、
を有する方法。 - 請求項1記載の方法であって、上記正規化アドレスリスト生成ステップが、
メール記載アドレスからアドレスコアを抽出するステップと、
抽出したアドレスコア内の各文字をその文字によく似た外観を有する類態文字を含む類態語に置換して類似アドレスコアのリストを生成するステップと、
文字重複型正規化、文字数削減型正規化、単複変換型正規化及び区切り文字正規化のうちの少なくとも一種類の処理を含む文字再正規化処理を各類似アドレスコアに施すステップと、
文字再正規化処理種類毎に新規アドレスコアのリストを生成するステップと、
類似アドレスコアのリストと新規アドレスコアのリストを統合し重複するものを除外することにより合成アドレスコアリストを生成するステップと、
メール記載アドレス中のプレフィクス及びサフィックスを合成アドレスコアリスト内のアドレスコアと再結合させることにより再結合アドレスを生成しリスト化するステップと、
各再結合アドレスのサフィックスをサフィックス候補と置き換えてサフィックス置換版アドレスの網羅的なリストを生成するステップと、
サフィックス置換版アドレスのリストと再結合アドレスのリストを統合して正規化アドレスリストを生成するステップと、
を含む方法。 - 請求項1記載の方法であって、比較試験が、テキスト比較試験、ホワイトリスト比較試験及び検索エンジン試験のうち少なくとも一種類を含む方法。
- 電子メールサーバ及び複数台のパーソナルコンピュータを含むネットワーク接続環境にてフィッシングを狙った電子メールを受信時に検知するシステムであって、
アドレスが記載されている電子メールを受信する手段と、
受信した電子メールのソースコードを取得する手段と、
その電子メールの受信者向け表示テキストを取得する手段と、
取得したソースコードから全てのメール記載アドレスを取得しリスト化する手段と、
各メール記載アドレスに視覚的な文字正規化処理を施すことにより網羅的に変形アドレス候補を求め正規化アドレスリストを生成する手段と、
生成した正規化アドレスリストからメール記載アドレスを除外して変形アドレスからなるリストを生成する手段と、
受信した電子メールの不正性を判別するため変形アドレスに基づく比較試験を実行する手段と、
その比較試験により不正性が判明したときに、受信した電子メールに詐欺メールの疑いがあることを知らせるメッセージを受信者に送る手段と、
ある変形アドレスに基づく比較試験により不正性が判明しなかったときに、他の変形アドレスについてもその比較試験を実施する手段と、
全変形アドレスについて比較試験を行っても不正性が判明しなかったときに、受信した電子メールが真正であり受け入れうることを受信者に知らせる手段と、
を有するシステム。
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/443,240 US7668921B2 (en) | 2006-05-30 | 2006-05-30 | Method and system for phishing detection |
US11/443,240 | 2006-05-30 |
Publications (2)
Publication Number | Publication Date |
---|---|
JP2007323640A true JP2007323640A (ja) | 2007-12-13 |
JP5128848B2 JP5128848B2 (ja) | 2013-01-23 |
Family
ID=38421462
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
JP2007136136A Expired - Fee Related JP5128848B2 (ja) | 2006-05-30 | 2007-05-23 | フィッシング検知方法及びシステム |
Country Status (4)
Country | Link |
---|---|
US (1) | US7668921B2 (ja) |
EP (1) | EP1863240B1 (ja) |
JP (1) | JP5128848B2 (ja) |
DE (1) | DE602007008174D1 (ja) |
Cited By (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2012068255A2 (en) * | 2010-11-16 | 2012-05-24 | Art Fritzson | Systems and methods for identifying and mitigating information security risks |
US8615807B1 (en) | 2013-02-08 | 2013-12-24 | PhishMe, Inc. | Simulated phishing attack with sequential messages |
US8635703B1 (en) | 2013-02-08 | 2014-01-21 | PhishMe, Inc. | Performance benchmarking for simulated phishing attacks |
US9253207B2 (en) | 2013-02-08 | 2016-02-02 | PhishMe, Inc. | Collaborative phishing attack detection |
US9262629B2 (en) | 2014-01-21 | 2016-02-16 | PhishMe, Inc. | Methods and systems for preventing malicious use of phishing simulation records |
US9325730B2 (en) | 2013-02-08 | 2016-04-26 | PhishMe, Inc. | Collaborative phishing attack detection |
US9398038B2 (en) | 2013-02-08 | 2016-07-19 | PhishMe, Inc. | Collaborative phishing attack detection |
US9906554B2 (en) | 2015-04-10 | 2018-02-27 | PhishMe, Inc. | Suspicious message processing and incident response |
JP2019053613A (ja) * | 2017-09-15 | 2019-04-04 | キヤノンマーケティングジャパン株式会社 | 情報処理装置、情報処理システム、制御方法、及びプログラム |
JP2020524314A (ja) * | 2017-07-05 | 2020-08-13 | アリババ グループ ホウルディング リミテッド | 危険アドレス識別方法及び機器、並びに電子装置 |
Families Citing this family (54)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8874477B2 (en) | 2005-10-04 | 2014-10-28 | Steven Mark Hoffberg | Multifactorial optimization system and method |
US20080000970A1 (en) * | 2006-06-30 | 2008-01-03 | Savage Kent A | System and method for network-based talent contest |
US8220047B1 (en) | 2006-08-09 | 2012-07-10 | Google Inc. | Anti-phishing system and method |
US20080060062A1 (en) * | 2006-08-31 | 2008-03-06 | Robert B Lord | Methods and systems for preventing information theft |
US7676547B2 (en) * | 2006-09-22 | 2010-03-09 | Zyxel Communications Corp. | System for processing information including a mail subject of an e-mail not including all contents of the e-mail for controlling delivery of the mail subject requested by a host and method thereof |
US8578481B2 (en) * | 2006-10-16 | 2013-11-05 | Red Hat, Inc. | Method and system for determining a probability of entry of a counterfeit domain in a browser |
US8745151B2 (en) * | 2006-11-09 | 2014-06-03 | Red Hat, Inc. | Web page protection against phishing |
US20090006532A1 (en) * | 2007-06-28 | 2009-01-01 | Yahoo! Inc. | Dynamic phishing protection in instant messaging |
US8438610B2 (en) * | 2007-09-28 | 2013-05-07 | Emc Corporation | Identity-based address normalization |
US8091118B2 (en) * | 2007-12-21 | 2012-01-03 | At & T Intellectual Property I, Lp | Method and system to optimize efficiency when managing lists of untrusted network sites |
US8856937B1 (en) | 2008-06-27 | 2014-10-07 | Symantec Corporation | Methods and systems for identifying fraudulent websites |
US20090328208A1 (en) * | 2008-06-30 | 2009-12-31 | International Business Machines | Method and apparatus for preventing phishing attacks |
US20100042687A1 (en) * | 2008-08-12 | 2010-02-18 | Yahoo! Inc. | System and method for combating phishing |
US20100057895A1 (en) * | 2008-08-29 | 2010-03-04 | At& T Intellectual Property I, L.P. | Methods of Providing Reputation Information with an Address and Related Devices and Computer Program Products |
US20100154055A1 (en) * | 2008-12-12 | 2010-06-17 | At&T Intellectual Property I, L.P. | Prefix Domain Matching for Anti-Phishing Pattern Matching |
US8225401B2 (en) * | 2008-12-18 | 2012-07-17 | Symantec Corporation | Methods and systems for detecting man-in-the-browser attacks |
CN101504673B (zh) * | 2009-03-24 | 2011-09-07 | 阿里巴巴集团控股有限公司 | 一种识别疑似仿冒网站的方法与系统 |
US8438642B2 (en) | 2009-06-05 | 2013-05-07 | At&T Intellectual Property I, L.P. | Method of detecting potential phishing by analyzing universal resource locators |
US9652802B1 (en) | 2010-03-24 | 2017-05-16 | Consumerinfo.Com, Inc. | Indirect monitoring and reporting of a user's credit data |
US9065850B1 (en) | 2011-02-07 | 2015-06-23 | Zscaler, Inc. | Phishing detection systems and methods |
EP2676197B1 (en) | 2011-02-18 | 2018-11-28 | CSidentity Corporation | System and methods for identifying compromised personally identifiable information on the internet |
CN102902917A (zh) * | 2011-07-29 | 2013-01-30 | 国际商业机器公司 | 用于预防钓鱼式攻击的方法和系统 |
US8819793B2 (en) | 2011-09-20 | 2014-08-26 | Csidentity Corporation | Systems and methods for secure and efficient enrollment into a federation which utilizes a biometric repository |
US8700913B1 (en) | 2011-09-23 | 2014-04-15 | Trend Micro Incorporated | Detection of fake antivirus in computers |
US11030562B1 (en) | 2011-10-31 | 2021-06-08 | Consumerinfo.Com, Inc. | Pre-data breach monitoring |
US9432401B2 (en) * | 2012-07-06 | 2016-08-30 | Microsoft Technology Licensing, Llc | Providing consistent security information |
US9344449B2 (en) | 2013-03-11 | 2016-05-17 | Bank Of America Corporation | Risk ranking referential links in electronic messages |
US8812387B1 (en) | 2013-03-14 | 2014-08-19 | Csidentity Corporation | System and method for identifying related credit inquiries |
US9621566B2 (en) | 2013-05-31 | 2017-04-11 | Adi Labs Incorporated | System and method for detecting phishing webpages |
US9203849B2 (en) | 2013-12-04 | 2015-12-01 | Apple Inc. | Preventing URL confusion attacks |
EP3198834A4 (en) | 2014-09-26 | 2018-03-21 | Sanjay Parekh | Method and system for email privacy, security and information theft detection |
RU2682038C2 (ru) * | 2014-09-30 | 2019-03-14 | Общество С Ограниченной Ответственностью "Яндекс" | Способ обработки сообщений электронной почты, содержащих цитируемый текст, и компьютер, используемый в нем |
US10339527B1 (en) | 2014-10-31 | 2019-07-02 | Experian Information Solutions, Inc. | System and architecture for electronic fraud detection |
US9398047B2 (en) | 2014-11-17 | 2016-07-19 | Vade Retro Technology, Inc. | Methods and systems for phishing detection |
US9253208B1 (en) | 2015-03-05 | 2016-02-02 | AO Kaspersky Lab | System and method for automated phishing detection rule evolution |
US11151468B1 (en) | 2015-07-02 | 2021-10-19 | Experian Information Solutions, Inc. | Behavior analysis using distributed representations of event data |
US9781132B2 (en) * | 2015-10-13 | 2017-10-03 | Yahoo Holdings, Inc. | Fraud prevention |
US10140273B2 (en) * | 2016-01-19 | 2018-11-27 | International Business Machines Corporation | List manipulation in natural language processing |
US10142366B2 (en) * | 2016-03-15 | 2018-11-27 | Vade Secure, Inc. | Methods, systems and devices to mitigate the effects of side effect URLs in legitimate and phishing electronic messages |
GB201605004D0 (en) * | 2016-03-24 | 2016-05-11 | Secr Defence | A method of protecting a user from messages with links to malicious websites |
US10193923B2 (en) * | 2016-07-20 | 2019-01-29 | Duo Security, Inc. | Methods for preventing cyber intrusions and phishing activity |
US10699028B1 (en) | 2017-09-28 | 2020-06-30 | Csidentity Corporation | Identity security architecture systems and methods |
US10896472B1 (en) | 2017-11-14 | 2021-01-19 | Csidentity Corporation | Security and identity verification system and architecture |
US10834111B2 (en) | 2018-01-29 | 2020-11-10 | International Business Machines Corporation | Method and system for email phishing attempts identification and notification through organizational cognitive solutions |
US20190319905A1 (en) * | 2018-04-13 | 2019-10-17 | Inky Technology Corporation | Mail protection system |
US11108821B2 (en) * | 2019-05-01 | 2021-08-31 | KnowBe4, Inc. | Systems and methods for use of address fields in a simulated phishing attack |
US11882112B2 (en) | 2021-05-26 | 2024-01-23 | Bank Of America Corporation | Information security system and method for phishing threat prevention using tokens |
US11792224B2 (en) | 2021-05-26 | 2023-10-17 | Bank Of America Corporation | Information security system and method for phishing threat detection using tokens |
CN113556347B (zh) * | 2021-07-22 | 2023-04-07 | 深信服科技股份有限公司 | 一种钓鱼邮件的检测方法、装置、设备及存储介质 |
US11882152B2 (en) | 2021-07-30 | 2024-01-23 | Bank Of America Corporation | Information security system and method for phishing website identification based on image hashing |
DE112022004423T5 (de) | 2021-09-16 | 2024-07-11 | Centripetal Networks, Llc | Erkennung von bösartigen homoglyphischen domainnamen, erzeugung, und assoziierte cybersicherheitsanwendungen |
CN114095278B (zh) * | 2022-01-19 | 2022-05-24 | 南京明博互联网安全创新研究院有限公司 | 一种基于混合特征选择框架的钓鱼网站检测方法 |
WO2023187353A1 (en) * | 2022-03-30 | 2023-10-05 | Egress Software Technologies Ip Limited | Method and system for processing data packages |
WO2023196376A1 (en) * | 2022-04-07 | 2023-10-12 | Cisco Technology, Inc. | Algorithm to detect malicious emails impersonating brands |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020133514A1 (en) * | 2001-03-15 | 2002-09-19 | International Business Machines Corporation | Method, system, and program for verifying network addresses included in a file |
JP2005135328A (ja) * | 2003-10-31 | 2005-05-26 | Nec Corp | メールサーバ、電子メール管理方法及び電子メール管理プログラム |
WO2005094238A2 (en) * | 2004-03-11 | 2005-10-13 | Sri International | Method and apparatus for analysis of electronic communications containing imagery |
Family Cites Families (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8145710B2 (en) * | 2003-06-18 | 2012-03-27 | Symantec Corporation | System and method for filtering spam messages utilizing URL filtering module |
US7421498B2 (en) * | 2003-08-25 | 2008-09-02 | Microsoft Corporation | Method and system for URL based filtering of electronic communications and web pages |
US7664812B2 (en) * | 2003-10-14 | 2010-02-16 | At&T Intellectual Property I, L.P. | Phonetic filtering of undesired email messages |
US8060915B2 (en) | 2003-12-30 | 2011-11-15 | Entrust, Inc. | Method and apparatus for providing electronic message authentication |
US7529802B2 (en) | 2004-06-16 | 2009-05-05 | International Business Machines Corporation | Method for performing multiple hierarchically tests to verify identity of sender of an email message and assigning the highest confidence value |
WO2006020095A2 (en) | 2004-07-16 | 2006-02-23 | Geotrust, Inc. | Security systems and services to provide identity and uniform resource identifier verification |
US7422115B2 (en) | 2004-09-07 | 2008-09-09 | Iconix, Inc. | Techniques for to defeat phishing |
US20060053202A1 (en) | 2004-09-09 | 2006-03-09 | Chris Foo | Method and system implementing secure email |
US20060059111A1 (en) | 2004-09-10 | 2006-03-16 | Tucker David M | Authentication method for securely disclosing confidential information over the internet |
US20060080735A1 (en) | 2004-09-30 | 2006-04-13 | Usa Revco, Llc | Methods and systems for phishing detection and notification |
US7461339B2 (en) * | 2004-10-21 | 2008-12-02 | Trend Micro, Inc. | Controlling hostile electronic mail content |
US8032594B2 (en) * | 2004-11-10 | 2011-10-04 | Digital Envoy, Inc. | Email anti-phishing inspector |
US7634810B2 (en) * | 2004-12-02 | 2009-12-15 | Microsoft Corporation | Phishing detection, prevention, and notification |
US7366762B2 (en) * | 2005-10-04 | 2008-04-29 | International Business Machines Corporation | Method for monitoring and reporting usage of non-hypertext markup language e-mail campaigns |
US20070136806A1 (en) * | 2005-12-14 | 2007-06-14 | Aladdin Knowledge Systems Ltd. | Method and system for blocking phishing scams |
-
2006
- 2006-05-30 US US11/443,240 patent/US7668921B2/en not_active Expired - Fee Related
-
2007
- 2007-05-23 JP JP2007136136A patent/JP5128848B2/ja not_active Expired - Fee Related
- 2007-05-30 DE DE602007008174T patent/DE602007008174D1/de active Active
- 2007-05-30 EP EP07109187A patent/EP1863240B1/en not_active Expired - Fee Related
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020133514A1 (en) * | 2001-03-15 | 2002-09-19 | International Business Machines Corporation | Method, system, and program for verifying network addresses included in a file |
JP2005135328A (ja) * | 2003-10-31 | 2005-05-26 | Nec Corp | メールサーバ、電子メール管理方法及び電子メール管理プログラム |
WO2005094238A2 (en) * | 2004-03-11 | 2005-10-13 | Sri International | Method and apparatus for analysis of electronic communications containing imagery |
JP2007529075A (ja) * | 2004-03-11 | 2007-10-18 | エスアールアイ インターナショナル | イメージを含んでいる電子通信を解析する方法及び装置 |
Non-Patent Citations (4)
Title |
---|
CSND200500385006; 榊原 康: '迷惑メールと闘う' 日経システム構築 no.138 第138号, 20040926, p.176〜185, 日経BP社 * |
CSND200500676001; 渡邉 利和: '個人情報保護&スパイウェア・スパム撃退法' ASCII 第28巻 第12号 第28巻, 20041201, p.114〜121, 株式会社アスキー * |
JPN6012003922; 榊原 康: '迷惑メールと闘う' 日経システム構築 no.138 第138号, 20040926, p.176〜185, 日経BP社 * |
JPN6012003924; 渡邉 利和: '個人情報保護&スパイウェア・スパム撃退法' ASCII 第28巻 第12号 第28巻, 20041201, p.114〜121, 株式会社アスキー * |
Cited By (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8793799B2 (en) | 2010-11-16 | 2014-07-29 | Booz, Allen & Hamilton | Systems and methods for identifying and mitigating information security risks |
WO2012068255A3 (en) * | 2010-11-16 | 2012-07-19 | Art Fritzson | Systems and methods for identifying and mitigating information security risks |
US9270696B2 (en) | 2010-11-16 | 2016-02-23 | Booz Allen Hamilton Inc. | Systems and method for identifying and mitigating information security risks |
WO2012068255A2 (en) * | 2010-11-16 | 2012-05-24 | Art Fritzson | Systems and methods for identifying and mitigating information security risks |
US8966637B2 (en) | 2013-02-08 | 2015-02-24 | PhishMe, Inc. | Performance benchmarking for simulated phishing attacks |
US9325730B2 (en) | 2013-02-08 | 2016-04-26 | PhishMe, Inc. | Collaborative phishing attack detection |
US9053326B2 (en) | 2013-02-08 | 2015-06-09 | PhishMe, Inc. | Simulated phishing attack with sequential messages |
US9246936B1 (en) | 2013-02-08 | 2016-01-26 | PhishMe, Inc. | Performance benchmarking for simulated phishing attacks |
US9253207B2 (en) | 2013-02-08 | 2016-02-02 | PhishMe, Inc. | Collaborative phishing attack detection |
US8635703B1 (en) | 2013-02-08 | 2014-01-21 | PhishMe, Inc. | Performance benchmarking for simulated phishing attacks |
US8615807B1 (en) | 2013-02-08 | 2013-12-24 | PhishMe, Inc. | Simulated phishing attack with sequential messages |
US10187407B1 (en) | 2013-02-08 | 2019-01-22 | Cofense Inc. | Collaborative phishing attack detection |
US9356948B2 (en) | 2013-02-08 | 2016-05-31 | PhishMe, Inc. | Collaborative phishing attack detection |
US9398038B2 (en) | 2013-02-08 | 2016-07-19 | PhishMe, Inc. | Collaborative phishing attack detection |
US9591017B1 (en) | 2013-02-08 | 2017-03-07 | PhishMe, Inc. | Collaborative phishing attack detection |
US9667645B1 (en) | 2013-02-08 | 2017-05-30 | PhishMe, Inc. | Performance benchmarking for simulated phishing attacks |
US9674221B1 (en) | 2013-02-08 | 2017-06-06 | PhishMe, Inc. | Collaborative phishing attack detection |
US10819744B1 (en) | 2013-02-08 | 2020-10-27 | Cofense Inc | Collaborative phishing attack detection |
US9262629B2 (en) | 2014-01-21 | 2016-02-16 | PhishMe, Inc. | Methods and systems for preventing malicious use of phishing simulation records |
US9906539B2 (en) | 2015-04-10 | 2018-02-27 | PhishMe, Inc. | Suspicious message processing and incident response |
US9906554B2 (en) | 2015-04-10 | 2018-02-27 | PhishMe, Inc. | Suspicious message processing and incident response |
JP2020524314A (ja) * | 2017-07-05 | 2020-08-13 | アリババ グループ ホウルディング リミテッド | 危険アドレス識別方法及び機器、並びに電子装置 |
JP2019053613A (ja) * | 2017-09-15 | 2019-04-04 | キヤノンマーケティングジャパン株式会社 | 情報処理装置、情報処理システム、制御方法、及びプログラム |
Also Published As
Publication number | Publication date |
---|---|
US20070283000A1 (en) | 2007-12-06 |
US7668921B2 (en) | 2010-02-23 |
DE602007008174D1 (de) | 2010-09-16 |
EP1863240B1 (en) | 2010-08-04 |
JP5128848B2 (ja) | 2013-01-23 |
EP1863240A3 (en) | 2009-03-25 |
EP1863240A2 (en) | 2007-12-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP5128848B2 (ja) | フィッシング検知方法及びシステム | |
US11546375B2 (en) | Detection of external messaging attacks using trust relationships | |
US11677783B2 (en) | Analysis of potentially malicious emails | |
Fette et al. | Learning to detect phishing emails | |
US20190319905A1 (en) | Mail protection system | |
US20130263263A1 (en) | Web element spoofing prevention system and method | |
US20090089859A1 (en) | Method and apparatus for detecting phishing attempts solicited by electronic mail | |
US20090328208A1 (en) | Method and apparatus for preventing phishing attacks | |
US20070094500A1 (en) | System and Method for Investigating Phishing Web Sites | |
JP2007122692A (ja) | セキュリティ管理装置、通信システムおよびアクセス制御方法 | |
KR20050000309A (ko) | 개선된 스팸 검출 기술 | |
US10984274B2 (en) | Detecting hidden encoding using optical character recognition | |
US11978020B2 (en) | Email security analysis | |
JP4781922B2 (ja) | リンク情報検証方法、システム、装置、およびプログラム | |
Sankhwar et al. | Email phishing: an enhanced classification model to detect malicious urls | |
US10999322B1 (en) | Anti-phishing system and method using computer vision to match identifiable key information | |
Hajiali et al. | Preventing phishing attacks using text and image watermarking | |
JP2006338494A (ja) | 正当サイト検証方法、装置、およびプログラム | |
CN101656707A (zh) | 网站的防伪标识系统及其实现方法 | |
US11757816B1 (en) | Systems and methods for detecting scam emails | |
Mansfield-Devine | Bad behaviour: exploiting human weaknesses | |
WO2006042480A2 (en) | System and method for investigating phishing web sites | |
KR100693842B1 (ko) | 피싱 방지 방법 및 피싱 방지 프로그램이 기록된 컴퓨터판독 가능 기록 매체 | |
KR20090001505A (ko) | 도메인 패턴 검출을 통한 피싱 방지 방법 및 방지프로그램이 기록된 컴퓨터 판독 가능 기록 매체 | |
Barbar et al. | Image spam detection using FENOMAA technique |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
A621 | Written request for application examination |
Free format text: JAPANESE INTERMEDIATE CODE: A621 Effective date: 20100519 |
|
A131 | Notification of reasons for refusal |
Free format text: JAPANESE INTERMEDIATE CODE: A131 Effective date: 20120131 |
|
A521 | Request for written amendment filed |
Free format text: JAPANESE INTERMEDIATE CODE: A523 Effective date: 20120426 |
|
TRDD | Decision of grant or rejection written | ||
A01 | Written decision to grant a patent or to grant a registration (utility model) |
Free format text: JAPANESE INTERMEDIATE CODE: A01 Effective date: 20121009 |
|
A01 | Written decision to grant a patent or to grant a registration (utility model) |
Free format text: JAPANESE INTERMEDIATE CODE: A01 |
|
A61 | First payment of annual fees (during grant procedure) |
Free format text: JAPANESE INTERMEDIATE CODE: A61 Effective date: 20121101 |
|
R150 | Certificate of patent or registration of utility model |
Free format text: JAPANESE INTERMEDIATE CODE: R150 |
|
FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20151109 Year of fee payment: 3 |
|
R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
LAPS | Cancellation because of no payment of annual fees |