Filed in archive
by randy on April 5, 2006
SecurityFocus: Researchers at Harvard University and UC Berkeley have published a document explaining why phishing works on general users.
http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf
source Schneier on Security.
This paper provides the first empirical evidence about which malicious strategies are successful at deceiving general users. We first analyzed a large set of captured phishing attacks and developed a set of hypotheses about why these strategies might work. We then assessed these hypotheses with a usability study in which 22 participants were shown 20 web sites and asked to determine which ones were fraudulent. We found that 23% of the participants did not look at browser-based cues such as the address bar, status bar and the security indicators, leading to incorrect choices 40% of the time.
http://people.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf
source Schneier on Security.
Permalink: Why Phishing Works
Trackback: http://publish.creative-weblogging.com/publish/mt-tb.pl/19568
Addthis
Ask
Blinklist
del.icio.us
Digg
Fark
Facebook
Google
Lycos
Ma.gnolia
Mr Wong
Netscape
Netvousz
Newsvine
Reddit
StumbleUpon
Slashdot
Tailrank
Technorati
Wink
Yahoo
Vote for Why Phishing Works:
|
Rating: 8.00 out of 3 vote(s) cast.
|
Subscribe
Use the search to look for other interesting posts
| RSS |  See all blog subscribe options |
 What is RSS? | |
| Yahoo! |
|
| Addthis |
|
| Bloglines |
|
| Newsletter | |
| Follow us on Twitter! |
