Advanced White List Approach for Preventing Access to Phishing Sites

Solutions based on black lists of phishing Web sites are partially effective. Such solutions, however, require the antiphishing organizations to be much faster than the attackers. And the effectiveness of private information preserving approach such as AntiPhish is totally dependent on users. To keep their private information could be irritating works for users. And it is not a good idea to store private information which is mostly memorized by users in a computer system. In this paper, we presents the white list based approach that prevents accesses to explicit phishing sites and warns for phishing-suspicious accesses by the URL similarity check. To cope with the local and DNS pharming attacks, we proposes a mechanism comparing DNS query results. Also, the implementation called PhishingGuard and test examples are introduced.