Custom Plugin - A Solution to Phishing and Pharming Attacks

摘要

This paper proposes a new method to detect, alert and protect the user from Internationalized Domain Names (IDN) and Uniform Resource Locator (URL) spoofing, phishing, pharming and man-in-the-middle attacks by validating the site before the user actually enters the personal details. The suggested method is based on the use of a browser plugin which enables the user to validate the website which provides visual feedback. In case of pharming, where Domain Name System (DNS) is hijacked, the plugin automatically notifies the user of possible attack, posts the attack information to the server and redirects the user to legitimate website. SSL/TLS certificates are also automatically checked, verified and validated by the plugin in order to check for man-in-the-middle and pharming attacks.