Seclayer: A Plugin to Prevent Phishing Attacks

Abstract

Today’s phishing attacks are the combination of social engineering and technical exploits designed to convince a victim to provide personal information. The attacks are designed in a way to fool even a modern technical user who has a complete understanding of the Internet and phishing. The attacker even send spoofed message to complement the spoofed phishing mail they have sent to make the e-mail even convincing. We have done everything from SSL to installing toolbar and Add-on to counter them, but we still could not overpower the attackers. Human being, the weakest chain in all of this, falls as a prey in the attacker’s hand. To mitigate this widespread problem of phishing on the Internet, almost all modern-day browsers provide security indicators. A lot have been done to identify it, but still it remains an imminent threat on the Internet. In this paper, I have introduced a new project ‘SECLAYER’ to stop phishing attacks. This Add-on can detect malicious website with 100% success, if the attacker does not have physical access to the system. This Add-on interacts with its hosted companion to maintain a list of websites to prevent phishing on.

Keywords: Phishing, Anti-phishing, Phishing-Plugin, Internet Security, Seclayer