Human beings have been living in social groups for an estimated 1.8 million years (Smithsonian, 2011). The initial social interactions involved small groups sharing tools and foods at favoured spots (Smithsonian, 2011) but most likely did not require any codification of social interactions or responsibilities.

Humans acquire their culture through enculturation and socialization so people living in different environments will develop differing cultural behaviours (Wikipedia, 2011). As society developed and humans began to live in more complex communities, rules and regulations appeared and set standards for what is acceptable in society thus marking the beginning of law. Despite the wide variety of societies and philosophies, the essences of law and criminality remain unchanged with interpretation and adherence of the laws differing only slightly between cultures and according to the dominance of differing forms of democracy.

The concept of social evolution developed by Lewis Henry Morgan differentiated between three eras, savagery, barbarism and civilization based upon technological advances such as fire, pottery, animal domestication, metal working and writing. Social and technological progresses were linked with technological progress driving social progress and changes within society (Morgan, 1877). Continuing technological advances seem to have pushed us into a new era – the information age, but with the new era, the same crimes exist in differing forms.

“Attackers never change their tunes, just their instruments. A defender must consider both likely attacks and likely attackers. Attacks have not varied very much throughout history. Murder is murder, stealing is stealing, and fraud is fraud. There hasn’t been a new crime invented in millennia. Murder, theft, impersonation, counterfeiting—they are all perennial problems and have been around since the beginning of society (Schneier, 2003).”

Schneier’s quote looks at human societies and their changes but without looking at a new society brought about by the advances in technology we see today – the virtual society. The same old crimes have found new forms, but the laws that have combated these old crimes have become blurred in the new society. The rules, responsibilities and acceptable behavioural ethics of the virtual society are still being explored and are beginning to be written into national and international law. This is much needed as identity theft and theft of a person’s money have seemingly become easier, with the introduction of the internet these crimes no longer have to take place in the same physical space or even continent. Fraudulent activities have been carried out and have evolved with commerce systems throughout history. As the systems evolved the tools and methods to exploit these systems and its customers have evolved also and become more sophisticated. The web affords anonymity and thereby allows the launch of thousands of simultaneous attacks to potential victims all over the world (Symantec, 2004).

With the rise of internet shopping online fraud and phishing scams are on the rise. In 2007, they were estimated to cost the UK banking industry £52.5 million, an increase of 132% from 2006 (National Fraud Authority, 2010). Whilst other types of fraudulent activity decrease, such as card not present fraud which decreased by 19% in 2009 (Symantec, 2010), phishing attempts continued to rise in 2010 particularly in December as attacks rose by 37% on the previous month as phishers attempted to exploit online Christmas shoppers (Symantec, 2010).

“The same technology that allows a small company to compete with a multinational allows a scam Web site to compete with a legitimate one (Schneier, 2003).”

Phishing scams revolve around humans, the developers, the criminals and the victims. Humans create the systems, humans use the systems and humans exploit these systems as well as other humans. Is it possible to prevent human exploitation of a system designed and developed by other humans? The phishers manipulation of human traits that have been inherited from our ancestors make them a formidable foe no matter what their level of technical skill.

The systems and brands that are exploited rely on customer trust to entice new and keep existing customers, so companies’ with compromised brands are reluctant to publicize when their brand is exploited. The study from life assistance company CPP estimated that people in the UK were targeted by 3.7 billion ‘phishing’ emails in the last 12 months. More than half of the emails sent out were impersonating legitimate correspondence from high street banks (Roberts, 2010).

Phishing has grown into a significant threat to the virtual society. It is still unknown how much further it will continue to grow as a threat, how the technical and psychological methods of phishing can be defended against to prevent further growth, who should assume responsibility for resisting responding to phishing sites – users,  or the institutions that are being replicated and who should take larger steps in the prevention of phishing; customers who are sensible enough to educate themselves or businesses, their federations and trade bodies (such as the CBI).

Return to table of contents
Return to Abstract
Proceed to Chapter 2 – Phishing – The history of Phishing (coming soon)

A lack of sophistication in early emails which held back the criminals then, has evolved and led to a sophisticated societal and technical crime which has increased drastically in recent years, continuing to evolve and use new methods to successfully lure victims quicker than society and security countermeasures can keep up to prevent the crimes from happening.

Phishing could be seen as a technological illustration of human natures ability to exploit and deceive. This human nature has allowed criminals to successfully steal from and defraud unsuspecting individuals and financial institutions for millennia, with individuals and institutions relying more and more on the internet for communication and business. Human nature has taken advantage of the technology to advance their criminal activity to a new level on a mass scale.

This dissertation considers the social and technical aspects of phishing and how at present they allow phishing to succeed. It discusses existing prevention methods, and why they are not seemingly able to slow down or prevent phishing, as well as the future evolution of phishing and countermeasures to determine whether a technical manifestation of an age old crime preying on human benefits and flaws can be prevented in this relatively new information age, whilst examining the role of the companies and users in its prevention. Who should take greater responsibility, consumers or companies?

The research gathered and detailed in this dissertation suggests that the threat of phishing cannot be completely eliminated. The threat of existing phishing methods can be lessened by greater company investment and adherence to their own security guidelines, as well as further consumer education. However when this threat is lessened phishers will continue to find new methods to exploit technology combined with the guarantee that human nature dictates, someone, somewhere will fall for their lure.

Return to Table of contents or Proceed to Introduction

References

Aaker, D., 1991. Managing Brand Equity: Capitalizing on the Value of a brand name. New York: The Free Press.

Anti-Phishing Working Group, 2010. Phishing Activity Trends Report Q1.

Anti-Phishing Working Group, 2011. Origins of the word “phishing”. [Online] Available at: http://www.antiphishing.org/word_phish.html [Accessed 23 January 2011].

APACS, 2006. APACS survey. [Online] Available at: http://complianceandprivacy.com/News-APACS-survey.asp [Accessed 22 February 2011].

Arthur, C., 2010. Google password system was target of Chinese hackers. [Online] Available at: http://www.guardian.co.uk/technology/2010/apr/20/google-chinese-hackers [Accessed 20 February 2011].

Baier, A., 1986. Trust and anti trust. pp.231-50.

BBC, 2007. Many net users not safety aware. [Online] Available at: http://news.bbc.co.uk/1/hi/technology/6472723.stm [Accessed 22 February 2011].

BBC, 2008. Paypal to block ‘unsafe browsers’. [Online] Available at: http://news.bbc.co.uk/1/hi/7354539.stm [Accessed 01 March 2011].

Beugge, C., 2010. Expat savers at risk from fraudsters. [Online] Available at: http://www.telegraph.co.uk/finance/personalfinance/offshorefinance/8079967/Expat-savers-at-risk-from-fraudsters.html [Accessed 22 February 2011].

Bhattacherjee, A., 2002. Individual Trust in Online Firms: Scale Development and Initial Test. Journal of Management Information Systems 19, pp.211-41.

Bradley, T., 2011. Mobile devices are new frontier for malware. [Online] Available at: http://www.csoonline.com/article/662973/mobile-devices-are-new-frontier-for-malware [Accessed 03 March 2011].

Briden, P., 2011. Third of all malware created in 2010. [Online] Available at: http://www.itpro.co.uk/629794/third-of-all-malware-created-in-2010 [Accessed 13 January 2011].

Brittanica, 2011. victimology. [Online] Available at: http://www.britannica.com/EBchecked/topic/1246187/victimology [Accessed 22 February 2011].

Cadzow Tech, 2010. Phishing Examples. [Online] Available at: http://kb.cadzow.com.au:15384/cadzow/details.aspx?ID=1422 [Accessed 17 January 2011].

Cagil, J., 2011. Trust Why do we need it? [Online] Available at: http://ezinearticles.com/?Trust:-Why-Do-We-Need-It?&id=115644 [Accessed 25 January 2011].

Clarke, R.F., 2011. Privacy is dead, deal with it. [Online] Available at: http://robfrancisclarke.com/2011/01/privacy-is-dead-deal-with-it/ [Accessed 22 February 2011].

Colville, S., 2009. Open redirects and phishing vectors. [Online] Available at: http://muffinresearch.co.uk/archives/2009/09/30/open-redirects-and-phishing-vectors/ [Accessed 13 January 2011].

Concerto Marketing, 2009. Brand Trust: The six drivers of brand trust. [Online] Available at: http://www.concertomarketing.com/wordpress/?p=368 [Accessed 12 January 2011].

CPP, 2010. Children spending millions in unauthorised spending spree. [Online] Available at: http://blog.cpp.co.uk/index.php/news/children-spend-millions-in-unauthorised-spending-spree/ [Accessed 22 February 2011].

Cranston, C., 2004. Anti Phishing Web service. [Online] Available at: http://personal.cis.strath.ac.uk/~gw/pm/former/Cranston_C.pdf [Accessed 21 December 2010].

Crowther, J., 2010. Facebook ‘clickjacking’ application cons 190,000 users. [Online] Available at: http://www.metro.co.uk/tech/831033-facebook-clickjacking-application-cons-190-000-users [Accessed 21 February 2011].

Cybersource, 2009. Fraud Report: Fear Steers UK Shoppers Away from Online. [Online] Available at: http://www.cybersource.co.uk/news_events/releases/11thfeb09.html [Accessed 28 February 2011].

Delgado-Ballester, E. & Luis Munuera-Alemán, J., 2001. Brand trust in the context of consumer loyalty. European Journal of Marketing, Vol. 35 Iss: 11/12, pp.1238 – 1258.

Dhanjani, N., Rios, B. & Hardin, B., 2009. Hacking – The next generation. California: O’Reilly.

Dickson, E., 2009. RSA Report Points to an Increase in Cyber Crime. [Online] Available at: http://blogcritics.org/scitech/article/rsa-report-points-to-an-increase/ [Accessed 12 January 2011].

Edwards, M.J., 2007. Yahoo! Mail Integrates PhishTank Data for Better Protection. [Online] Available at: http://www.sharepointproconnections.com/article/email/yahoo-mail-integrates-phishtank-data-for-better-protection.aspx [Accessed 01 March 2011].

Egger, F.N., 2003. Designing the Trust Experience for Business-to-Consumer Electronic Commerce. [Online] Available at: http://alexandria.tue.nl/extra2/200313389.pdf [Accessed 23 January 2011].

Federal Bureau of Investigation, 2008. Gone Phishing. [Online] Available at: http://www2.fbi.gov/page2/may08/phishing_052008.html [Accessed 24 January 2011].

Gartner, 2004. Phishing survey.

Gates, B., 2003. Building trust in technology. [Online] Available at: http://www.microsoft.com/presspass/ofnote/01-03davos.mspx [Accessed 12 January 2011].

Gaudin, S., 2007. California Man Gets 6-Year Sentence For Phishing. [Online] Available at: http://www.informationweek.com/news/internet/showArticle.jhtml?articleID=199903450&cid=RSSfeed_TechWeb [Accessed 11 January 2011].

Goodchild, J., 2011. Social engineering attacks: Highlights from 2010. [Online] Available at: http://www.itworld.com/security/132537/social-engineering-attacks-highlights-2010?page=0,2&source=itw_rss&utm_source=twitterfeed&utm_medium=twitter&utm_campaign=s3cb0t [Accessed 20 February 2011].

Grabner-Kräuter, S., Kaluscha, E. & Fladnitzer, M., 2006. Perspectives of online trust and similar constructs: a conceptual clarification. CEC ’06 Proceedings of the 8th international conference on Electronic commerce: The new e-commerce: innovations for conquering current barriers, obstacles and limitations to conducting successful business on the internet, pp.235-43.

Harris, J., 2010. Ofcom reports greater awareness of Internet security. [Online] Available at: http://www.internetbusiness.co.uk/2010/05/18/ofcom-reports-greater-awareness-of-internet-security/ [Accessed 22 February 2011].

Hartley, A., 2008. Spam gets 1 response per 12,500,000 emails. [Online] Available at: http://www.techradar.com/news/computing/spam-gets-1-response-per-12-500-000-emails-483381 [Accessed 01 March 2011].

Heath, N., 2010. UK headed for data breach disclosure law with four years. [Online] Available at: http://www.silicon.com/management/public-sector/2010/07/16/uk-headed-for-data-breach-disclosure-law-within-four-years-39746105/ [Accessed 21 February 2011].

Herd, S., Nilsson, M. & Adams, A., 2005. Building Security and Trust in Online Banking. Chicago.

Hird, J., 2009. Online consumers trust real people, not companies. [Online] Available at: http://econsultancy.com/uk/blog/4175-online-consumers-trust-real-people-not-companies [Accessed 11 January 2011].

Hoffman, D.L., Novak, T.P. & Peralta, M., 1999. Building Consumer Trust Online. Communications of the ACM Vol 42, pp.80-85.

Holbrook, M. & Chaudhuri, A., 2001. The chain of effects from brand trust and brand affect to brand performance: The role of brand loyalty. Journal of marketing vol 65, pp.81-93.

Honeypot Project, 2008. Real World Phishing Techniques. [Online] Available at: http://www.honeynet.org/node/95 [Accessed 02 January 2011].

Honeypot Project, 2008. Tools and Tactics. [Online] Available at: http://www.honeynet.org/node/88 [Accessed 08 January 2011].

Jagatic, T., Johnson, N., Jakobsson, M. & Menczar, F., 2005. Social Phishing. [Online] Available at: http://www.indiana.edu/~phishing/social-network-experiment/phishing-preprint.pdf [Accessed 20 December 2010].

Jakobsson, M., 2007. What Instills Trust? A Qualitative Study of Phishing. [Online] Available at: http://markus-jakobsson.com/papers/jakobsson-usec07-trust.pdf [Accessed 21 January 2011].

Jakobsson, M. & Myers, S., 2007. Phishing and Countermeasures. New Jersey: Wiley.

James, L., 2005. Phishing Exposed. Rockland: Syngress Publishing.

Koepcke, A.G., 2007. Why Do We Trust People. [Online] Available at: http://www.suite101.com/content/why-do-we-trust-people-a16249 [Accessed 24 January 2011].

Kraeuter, S.G., 2002. The role of consumers’ trust in online shopping. Journal of business ethics.

Langton, A., 2008. Amazon phishing emails. [Online] Available at: http://andylangton.co.uk/articles/it-security/amazon-phishing-emails/ [Accessed 22 February 2011].

Leyden, J., 2004. Zombie PCs spew out 80% of spam. [Online] Available at: http://www.theregister.co.uk/2004/06/04/trojan_spam_study/ [Accessed 09 January 2011].

Leyden, J., 2007. Man in the middle phishing kit netted. [Online] Available at: http://www.theregister.co.uk/2007/01/12/phishing_kit/ [Accessed 30 December 2010].

Lininger, R. & Vines, R.D., 2005. Phishing: Cutting the indentity theft line. Indianapolis: Wiley.

Mahalo, 2008. Phishing. [Online] Available at: http://www.mahalo.com/phishing [Accessed 02 December 2010].

MailFrontier, 2004. MailFrontier released Phishing index July 2004. [Online] Available at: http://www.mailfrontier.com/press/press_phish2.html [Accessed 29 December 2010].

Mann, I., 2008. Hacking the Human. Aldershot: Gower Publishing LTD.

Marketing Week, 2009. The importance of trust. [Online] Available at: http://www.marketingweek.co.uk/trends/the-importance-of-trust/2065087.article [Accessed 12 January 2011].

McGuinness, R., 2011. Porn searches lead to half of web security threats. [Online] Available at: http://www.metro.co.uk/tech/852941-porn-searches-lead-to-half-of-web-security-threats [Accessed 22 February 2011].

McKnight, H.D. & Chervany, N.L., 1996. The Meanings of Trust. [Online] Available at: http://www.misrc.umn.edu/wpaper/wp96-04.htm [Accessed 21 January 2011].

Metro, 2010. Online identity theft gang suspects arrested over £3m scams. [Online] Available at: http://www.metro.co.uk/news/837122-online-identity-theft-gang-suspects-arrested-over-3m-scams [Accessed 21 February 2011].

Milletary, J., 2010. Phishing Trends. [Online] Available at: http://www.us-cert.gov/reading_room/phishing_trends0511.pdf [Accessed 02 January 2011].

Mitnick, K., 2002. Art of Deception. Wiley & sons.

Mitnick, K., 2005. The Art of Intrusion. Indianapolis: Wiley.

Morgan, L.H., 1877. Ancient Society Or Researches in the Lines of Human Progress from Savagery through Barbarism to Civilization. [Online] Available at: http://www.marxists.org/reference/archive/morgan-lewis/ancient-society/ [Accessed 09 February 2011].

Moscaritolo, A., 2011. Dozens of malicious apps pulled from Android Market. [Online] Available at: http://www.scmagazineus.com/dozens-of-malicious-apps-pulled-from-android-market/article/197440/ [Accessed 05 March 2011].

Mutton, P., 2005. Netcraft News. [Online] Available at: http://news.netcraft.com/archives/2005/05/12/fraudsters_seek_to_make_phishing_sites_undetectable_by_content_filters.html [Accessed 02 January 2011].

National Fraud Authority, 2010. Annual Fraud Indicator. London.

Oxford Dictionaries, 2011. Definition of trust. [Online] Available at: http://oxforddictionaries.com/view/entry/m_en_gb0886040#m_en_gb0886040 [Accessed 13 January 2011].

Paletta, D., 2010. Phishing Scam Uses Geithner’s Name. [Online] Available at: http://blogs.wsj.com/washwire/2010/11/04/phishing-scam-uses-tim-geithners-name/ [Accessed 20 February 2011].

Parliamentary Office of Science and Technology, 2006. Postnote – computer crime. Parliamentary Office of Science and Technology.

PayPal, 2011. Fraud FAQ. [Online] Available at: https://www.paypal.com/cgi-bin/webscr?cmd=_payflow-fraud-faq-outside [Accessed 21 February 2011].

Pennanen, K., 2009. The initial stages of consumer trust building in e-commerce. Finland.

Prince, B., 2011. Taobao takes down itunes accounts. [Online] Available at: http://www.eweek.com/c/a/Security/Taobao-Takes-Down-iTunes-Accounts-After-Complaints-542833/ [Accessed 21 February 2011].

Rashid, F., 2011. PayPal, eBay Targeted in Web Theft Scam That Stole Millions. [Online] Available at: http://www.eweek.com/c/a/Security/PayPal-eBay-Targeted-in-Web-Theft-Scam-That-Stole-Millions-346101/ [Accessed 21 February 2011].

Raskin, A., 2010. Aza Raskin Blog. [Online] Available at: http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/ [Accessed 04 March 2011].

Rasmussen, R. & Aaron, G., 2010. Global Phishing Survey: Trends and domain name use in 1H2010.

Reid, C.E., 2009. History of Phishing. [Online] Available at: http://www.allspammedup.com/2009/02/history-of-phishing/ [Accessed 03 December 2011].

ricci, H., 2008. Online fraud worse than figures suggest. [Online] Available at: http://www.iii.co.uk/articles/articledisplay.jsp?section=Planning&article_id=9915363 [Accessed 21 February 2011].

Roberts, L., 2010. Britons receive more than 420,000 scam emails every hour. [Online] Available at: http://www.telegraph.co.uk/technology/news/7831633/Britons-receive-more-than-420000-scam-emails-every-hour.html [Accessed 29 December 2010].

Rousseau, D.M., Sitkin, S.B. & Butt, R.S., 1998. Not so different after all: a cross-discipline view. Academy of Management Review, pp.393-404.

RSA, 2008. RSA Online Fraud Report. [Online] Available at: http://www.rsa.com/solutions/consumer_authentication/intelreport/FRARPT_DS_1208.pdf [Accessed 13 January 2011].

Safe from Scams, 2010. Are Women More Likely to Fall for Online Scams? [Online] Available at: http://www.safefromscams.co.uk/are-women-more-likely-fall-for-online-scams.html [Accessed 22 Ferbuary 2011].

Sarlak, M.A. & Hastiani, A.A., 2008. Trust in virtual universities. Journal of Social Sciences.

Savage, M., 2008. Phishers targeting smaller financial firms, credit unions. [Online] Available at: http://searchfinancialsecurity.techtarget.com/news/article/0,289142,sid185_gci1299686,00.html [Accessed 21 February 2011].

Schneier, B., 2000. Secrets and Lies. Wiley & sons.

Schneier, B., 2000. Secrets and Lies – preface. [Online] Available at: http://www.schneier.com/book-sandl-pref.html [Accessed 17 February 2011].

Schneier, B., 2003. Beyond Fear: Thinking Sensibly About Security in an Uncertain World. New York: Copernicus Books.

Schneier, B. & Wagner, D., 1998. Analysis of the SSL 3.0 protocol. Proceedings of the 2nd USENIX workshop on Electronic commerce.

Security Park, 2010. Online fraud represents a significant revenue loss for merchants. [Online] Available at: http://www.securitypark.co.uk/security_article264272.html [Accessed 22 February 2011].

Shiels, M., 2010. Web scam hits iTunes and Paypal users. [Online] Available at: http://www.bbc.co.uk/news/technology-11065301 [Accessed 21 February 2011].

Smithsonian, 2011. What does it mean to be human? [Online] Available at: http://humanorigins.si.edu/human-characteristics/social [Accessed 08 February 2011].

Sutherland, P. & Tan, F.B., 2004. Online Consumer Trust: A Multi-Dimensional Model. Journal of Electronic Commerce in Organizations Vol 2 No 3, pp.40-58.

Symantec, 2004. Mitigating Online Fraud: Customer Confidence, Brand Protection, and Loss Minimization.

Symantec, 2007. A Brief history of Phishing Part 1. [Online] Available at: http://www.symantec.com/connect/blogs/brief-history-phishing-part-i [Accessed 11 January 2011].

Symantec, 2010. State of Spam and Phishing. [Online] Available at: http://www.symantec.com/content/en/us/enterprise/other_resources/b-state_of_spam_and_phishing_report_12-2010.en-us.pdf [Accessed 09 January 2011].

The Register, 2006. Prison Terms for Phishing Fraudsters. [Online] Available at: http://www.theregister.co.uk/2006/11/14/fraud_act_outlaws_phishing/ [Accessed 04 January 2011].

The Telegraph, 2009. Computer whizz-kids targeted in campaign to stop youngsters becoming hackers. [Online] Available at: http://www.telegraph.co.uk/technology/news/6270822/Computer-whizz-kids-targeted-in-campaign-to-stop-youngsters-becoming-hackers.html [Accessed 05 March 2011].

Thinkquest, 2011. Cybercrime – piercing the darkness. [Online] Available at: http://library.thinkquest.org/04oct/00460/victim.html [Accessed 22 February 2011].

Thinkquest, 2011. Cybercrime: Piercing the Darkness. [Online] Available at: http://library.thinkquest.org/04oct/00460/phishingHistory.html [Accessed 08 February 2011].

This is London, 2007. Fraud victims told: Go to the bank, NOT the police. [Online] Available at: http://www.thisislondon.co.uk/news/article-23390837-fraud-victims-told-go-to-the-bank-not-the-police.do [Accessed 04 January 2011].

Trusteer, 2008. Trusteer – In-session phishing advisory. [Online] Available at: http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf [Accessed 12 January 2011].

Trusteer, 2009. Measuring the Effectiveness of In-the-Wild Phishing Attacks. New York: Trusteer.

Utter, D., 2006. Professor Studies Why Phishing Works. [Online] Available at: http://www.securitypronews.com/insiderreports/insider/spn-49-20061005ProfessorStudiesWhyPhishingWorks.html [Accessed 05 March 2011].

Walsh, S., 2010. Top 10 phishing targets. [Online] Available at: http://www.allspammedup.com/2010/06/top-10-phishing-targets/ [Accessed 21 February 2011].

Washington Post, 2004. A brief history of phishing. [Online] Available at: http://www.washingtonpost.com/wp-dyn/articles/A59350-2004Nov18.html [Accessed 03 January 2011].

Wikipedia, 2010. Wikipedia: Phishing. [Online] Available at: http://en.wikipedia.org/wiki/Phishing [Accessed 03 January 2011].

Wikipedia, 2011. CAN-SPAM Act of 2003. [Online] Available at: http://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003 [Accessed 11 January 2011].

Wikipedia, 2011. Cultural anthropology. [Online] Available at: http://en.wikipedia.org/wiki/Cultural_anthropology [Accessed 09 February 2011].

Wikipedia, 2011. Trust (social sciences). [Online] Available at: http://en.wikipedia.org/wiki/Trust_(social_sciences) [Accessed 13 January 2011].

Woods, R., 2010. Facebook’s Mark Zuckerberg says privacy is dead. So why does he want to keeps this picture hidden? [Online] Available at: http://technology.timesonline.co.uk/tol/news/tech_and_web/the_web/article6991010.ece [Accessed 22 February 2011].

Bibliography

Allen, N., 2009. 100 charged in US and Egypt over phishing scam. [Online] Available at: http://www.telegraph.co.uk/news/worldnews/northamerica/usa/6270771/100-charged-in-US-and-Egypt-over-phishing-scam.html [Accessed 02 Janurary 2011].

BBC, 2010. Cyber attacks and terrorism head threats facing UK. [Online] Available at: http://www.bbc.co.uk/news/uk-11562969 [Accessed 01 March 2011].

BBC, 2010. Phishing attack nets 3 million euros of carbon permits. [Online] Available at: http://news.bbc.co.uk/1/hi/8497129.stm [Accessed 01 March 2011].

Beaumont, C., 2010. Twitter attack affects thousands of users. [Online] Available at: http://www.telegraph.co.uk/technology/twitter/7323095/Twitter-attack-affects-thousands-of-users.html [Accessed 12 January 2011].

Booth, R., 2010. Online Brand Trust & Identity Theft. [Online] Available at: http://fightingidfraud.co.uk/blog/2010/12/3/online-brand-trust-identity-theft.html [Accessed 06 Janurary 2011].

Butterworth, M., 2009. Britains biggest high street banks appear to have poor online security. [Online] Available at: http://www.telegraph.co.uk/finance/personalfinance/6093708/Britains-biggest-high-street-banks-appear-to-have-poor-online-security-campaigners-warn.html [Accessed 21 February 2011].

Cellan-Jones, R., 2010. First human ‘infected with computer virus’. [Online] Available at: http://www.bbc.co.uk/news/10158517 [Accessed 02 March 2011].

Comodo, 2006. Identity & Trust Assurance Market Analysis.

Day, J., 2010. Cyber wars: How to avoid computer network attacks. [Online] Available at: http://www.metro.co.uk/tech/845336-cyber-wars-how-to-avoid-computer-network-attacks [Accessed 01 March 2011].

Dhamija, R., Tygar, J.D. & Hearst, M., 2006. Why Phishing Works. CHI 2006 Proceedings .

GAO, 2007. Cybercrime – public and private entities face challenges in addressing cyber threats. United States Government Accountability Office.

Kobie, N., 2007. Phishing hurts brand confidence. [Online] Available at: http://www.itpro.co.uk/142338/phishing-hurts-brand-confidence [Accessed 28 February 2011].

Krebsbach, K., 2004. Goin Phishing. [Online] Available at: http://www.americanbanker.com/btn_issues/17_4/-219036-1.html?zkPrintable=true [Accessed 28 February 2011].

Ledford, J., n.d. Spear Phishing: Identity Theft’s New Black. [Online] Available at: http://idtheft.about.com/od/theftmethods/a/Spear_Phishing.htm [Accessed 02 January 2011].

Litan, A., 2005. Increased Phishing and Online Attacks Cause Dip in Consumer Confidence. Gartner.

Long, J., 2008. No Tech Hacking. Burlington: Syngress Publishing.

Metro, 2010. Facebook users warned of latest phishing scams. [Online] Available at: http://www.metro.co.uk/tech/818206-facebook-users-warned-of-latest-phishing-email-scam [Accessed 21 February 2011].

Moon, A., 2008. New phishing scam targets high level executives. [Online] Available at: http://www.techrepublic.com/blog/tech-news/new-phishing-scam-targets-high-level-executives/2166 [Accessed 21 February 2011].

Mutton, P., 2006. PayPal security flaw allows identity theft. [Online] Available at: http://news.netcraft.com/archives/2006/06/16/paypal_security_flaw_allows_identity_theft.html [Accessed 20 February 2011].

New York Times, 2010. Cyberattack on Google Said to Hit Password System. [Online] Available at: http://www.nytimes.com/2010/04/20/technology/20google.html?_r=1 [Accessed 01 March 2011].

Oak, M., 2011. Cyberterrorism. [Online] Available at: http://www.buzzle.com/articles/cyberterrorism.html [Accessed 28 February 2011].

Pritchard, J., 2010. SMSishing scams. [Online] Available at: http://banking.about.com/od/securityandsafety/a/smishing.htm [Accessed 03 March 2011].

Ragowsky, A. & Awad, N.F., 2008. Establishing Trust in Electronic Commerce Through Online Word of Mouth: An Examination Across Genders. Journal of Management Information Systems, pp.101-21.

Raywood, D., 2010. New phishing tactic that exploits open tabs revealed, with warnings made of criminal exploits. [Online] Available at: http://www.scmagazineuk.com/new-phishing-tactic-that-exploits-open-tabs-revealed-with-warnings-made-of-criminal-exploits/article/171107/ [Accessed 06 Janurary 2011].

Roberts, P., 2004. Phishing scourge prompts calls for change. [Online] Available at: http://www.networkworld.com/news/2004/0520phishscour.html [Accessed 01 March 2011].

Schwartz, E., 2001. Digital Cash Pay0ff – an MIT technology review. [Online] Available at: https://www.paypalobjects.com/html/mit-1201.html [Accessed 21 February 2011].

Security, N., 2010. Games on social networks increase spam 50%. [Online] Available at: http://www.net-security.org/malware_news.php?id=1283 [Accessed 22 February 2011].

Sophos, 2007. Torrent of spam likely to hit 6.3 million TD Ameritrade hack victims. [Online] Available at: http://www.sophos.com/pressoffice/news/articles/2007/09/ameritrade.html [Accessed 21 February 2011].

Symantec, 2006. Context Aware Phishing Realized. [Online] Available at: http://www.symantec.com/connect/blogs/context-aware-phishing-realized [Accessed 11 January 2011].

Tahir, T., 2010. £2.7bn cost of identity crimes. [Online] Available at: http://www.metro.co.uk/news/844272-2-7bn-cost-of-identity-crimes [Accessed 04 January 2011].

Telegraph, 2010. Ed Milliband falls victim to twitter phishing scam. [Online] Available at: http://www.telegraph.co.uk/technology/twitter/7323367/Ed-Miliband-falls-victim-to-Twitter-phishing-scam.html [Accessed 02 January 2011].

The Telegraph, 2009. 10,000 Hotmail account passwords stolen. [Online] Available at: http://www.telegraph.co.uk/technology/6265025/10000-Hotmail-account-passwords-stolen.html [Accessed 04 January 2011].

Verisign, 2009. Fraud Alert: Phishing – The latest tactics and the potential business impact. Verisign.

A starting point would be to post some articles relating to my dissertation for which I received first class grades for (78%). The dissertation was on phishing. I will add these articles every now and then over the coming days/weeks and hope you enjoy.

Table of contents:

Abstract

References
Bibliography

This report was part of a university assignment on HTML5 and CSS3.

The report can be found by following this link: HTML5 and CSS3 Report and a page containing some examples of the new tags and their capabilities can be viewed on this page: HTML5 and CSS3 Examples (Warning: Not all examples work in certain browsers as of May 2011).

I plan on using WordPress as a CMS.

dvchiddy.com web site redesign