Trust and Identity as Defenses Against Phishing and Spoofing.ppt
《Trust and Identity as Defenses Against Phishing and Spoofing.ppt》由会员分享,可在线阅读,更多相关《Trust and Identity as Defenses Against Phishing and Spoofing.ppt(22页珍藏版)》请在麦多课文档分享上搜索。
1、Trust and Identity as Defenses Against Phishing and Spoofing,Rick Ells University of Washington,Phishing and Spoofing,Phishing (sometimes called carding or brand spoofing) is a scam where the perpetrator sends out legitimate looking emails in an effort to phish for personal information from the reci
2、pient. Involves social engineering to manipulate the recipient into trusting the message enough to enter private information May link to a Web form duplicating the appearance and functionality of a legitimate Web site,Phishing email example,Date: Wed, 9 Jun 2004 10:34:16 -0500 From: USbank-securijtU
3、sB Reply-To: productu.washington.edu Subject: USB Security Update URGENcsSecurity Key: vnydramifyg .txcwqDear US Bank Customer, During our regular update and verification of the Internet Banking Accounts, We could not verify your current information. Either your information has been Changed or incom
4、plete, as a result your access to use our services has been Limited. Please update your information.To update your account information and start using our services please click on the link below: http: Requests for information will be initiated by US Bank Business Development; this process cannot be
5、 externally requested through customer support.,Phishing Web site example,Virtually identical to legitimate Web site except for possible additional fields and behind the scenes coding changes.,Common advice to users,Disregard messages you do not trust Do not click on links in messages you do not tru
6、st Do not visit Web sites you do not trust,Who do you trust?,How do users evaluate the trustworthiness of an email message or a Web site? What can we do to help them make the right decisions?,Definitions,trust - certainty based on past experience; “he wrote the paper with considerable reliance on th
7、e work of other scientists“; “he put more trust in his own two legs than in the gun“ (Oxford English Dictionary) trust that which is essential to a communication channel but which cannot be transferred from a source to a destination using that channel (Generalized Certification Theory http:/www.mcg.
8、org.br/cie.htm),Qualified Reliance on Information,Trust, as qualified reliance on information, needs multiple, independent channels to be communicated. If we have two entities (e.g., a client and server) talking to one another, we have only one channel of communication. Clearly, we need more than tw
9、o entities. Ed Gerck, Trust as Qualified Information,Prominence-Interpretation Theory,Prominence Involvement Topic Task Experience Individual differences,Interpretation Assumptions Skill/knowledge Context,Credibility Impact,The impact that element has on credibility assessment,What value or meaning
10、people assign to element, good or bad,An elements likelihood of being noticed when people evaluate credibility,B.J. Fogg Prominence-Interpretation Theory: Explaining How People Assess Credibility Online, CHI 2003,Trust Evaluations,Closeness Accuracy Sample size Variance Expertise Deferral (Accredita
11、tion),Trust in Electronic Markets: The convergence of crytographers And economists, by Joseph Beagle Jr., First Monday,Threshold (Group) Individual History Category History Agent is (dis)trusting Agent does (not) give benefit of the doubt,Design and organization,Users trust sites that are well-desig
- 1.请仔细阅读文档,确保文档完整性,对于不预览、不比对内容而直接下载带来的问题本站不予受理。
- 2.下载的文档,不会出现我们的网址水印。
- 3、该文档所得收入(下载+内容+预览)归上传者、原创作者;如果您是本文档原作者,请点此认领!既往收益都归您。
本资源只提供5页预览,全部文档请下载后查看!喜欢就下载吧,查找使用更方便
2000 积分 0人已下载
下载 | 加入VIP,交流精品资源 |
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- TRUSTANDIDENTITYASDEFENSESAGAINSTPHISHINGANDSPOOFINGPPT

链接地址:http://www.mydoc123.com/p-373470.html