INCH Extensions for Phishing Pat Cain pcain@coopercain.com - PowerPoint PPT Presentation

Jul 18, 2023 •120 likes •206 views

INCH Extensions for Phishing Pat Cain pcain@coopercain.com Draft-ietf-inch-phishingextns-01 WG accepted doc in Minnesota Draft -00 came out early June -01 came out early July -02 should come out mid-August Mods from jevans-00

INCH Extensions for Phishing Pat Cain pcain@coopercain.com
Draft-ietf-inch-phishingextns-01 • WG accepted doc in Minnesota • Draft -00 came out early June • -01 came out early July • -02 should come out mid-August
Mods from jevans-00 to -00 • Fixed the DTD and the Schema • Moved PhraudReport from top-level to EventData • Added support for: – other e-fraud – malware – basic large-scale spam reporting • Added more words
• +------------------+ • | Incident | • +------------------+ • | ENUM purpose |<>----------[ IncidentID ] • | ENUM restriction |<>--{0..1}--[ AlternativeID ] • | |<>--{0..1}--[ RelatedActivity ] • | |<>--{0..*}--[ Description ] • | |<>--{1..*}--[ Assessment ] • | |<>--{0..*}--[ Method ] • | |<>--{0..1}--[ DetectTime ] • | |<>--{0..1}--[ StartTime ] • | |<>--{0..1}--[ EndTime ] • | |<>----------[ ReportTime ] • | |<>--{1..*}--[ Contact ] • | |<>--{0..*}--[ Expectation ] • | |<>--{0..1}--[ History ] • | |<>--{0..*}--[ EventData ] • | | --> AdditionalData ] • | | --> PhraudReport (added) • +------------------
• +-----------------+ • | PhraudReport | • +-----------------+ • | ENUM Version |<>--(0..*)--[ PhishNameRef ] • | ENUM FraudType |<>--(0..*)--[ PhishNameLocalRef ] • | |<>--(0..*)--[ FraudParameter ] • | |<>--(0..*)--[ FraudedBrandName ] • | |<>--(1..*)--[ LureSource ] • | |<>----------[ OriginatingSensor ] • | |<>--(0..1)--[ EmailRecord ] • | |<>--(0..*)--[ DCSite ] • | |<>--(0..*)--[ TakeDownInfo ] • | |<>--(0..*)--[ ArchivedData ] • | |<>--(0..*)--[ RelatedData ] • | |<>--(0..*)--[ CorrelationData ] • | |<>--(0..1)--[ PRComments ] • +-----------------+
Modes from -00 to -01 • Fixed the DTD and the Schema • Checked consistently in DTD/Schema/Words
Modes from -01 to -02 • Fix the DTD and the Schema

Recommend

IODEF Extensions for Phishing and Other E-Crimeware Patrick Cain Latest Status New draft

IODEF Extensions for Phishing and Other E-Crimeware Patrick Cain Latest Status New draft out. Missed deadline by a little; should show up in repository soon. draft-ietf-inch-phishingextns-02 One Technical change Many

452 views • 5 slides

Phishing Reports using the INCH Format Pat Cain The Cooper-Cain Group 09 March 2005 IETF #62

Phishing Reports using the INCH Format Pat Cain The Cooper-Cain Group 09 March 2005 IETF #62 Some History The Financial Services Technology Consortium (www.fstc.org) ran a counter-phishing project last fall The AntiPhishing Working

483 views • 13 slides

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing In a Nutshell 2. Phishing Types & Techniques 3. Phishing Stats & Modern Trends 4. Case-Study 5. Stay Safe 2 Speaker ABOUT ME

478 views • 24 slides

OK OK OK Image circle OK OK OK 1/2.5-inch 1/1.8-inch 1/2-inch 1 VT4Z1450 1 14 -50mm

VT4Z1450 1 14 -50mm F2.6 6MP IR-Corrected 1 1 inch and 1/1.2 inch image size spec. 1/1.2-inch 1-inch Sensor size 2/3-inch OK OK OK Image circle OK OK OK 1/2.5-inch 1/1.8-inch 1/2-inch 1 VT4Z1450 1 14 -50mm F2.6 6MP

499 views • 15 slides

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing sensitive information such as passwords, usernames, and credit card details for malicious reasons. Phishing can be in the form of emails, social

530 views • 20 slides

Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the

School of Fin ine Arts Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the attempt to obtain personal information such as passwords and logins for malicious purposes. By appearing to be legitimate the

255 views • 13 slides

VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

THE STATE OF PHISHING ATTACK VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of Phishing Counter Measures Reports on Phishing Isaac K. Acheampong Facilities Manager BSc IT, Dip. IT, Sec+ STATE OF

711 views • 34 slides

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing?

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing? Phishing email messages, websites, and phone calls are designed to steal money or sensitive information. Cybercriminals can do this by installing

264 views • 24 slides

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing 3.0 Phishing kit 4.0 Types of Phishing 5.0 Avoidance Techniques 6.0 Effect of Phishing on Businesses 7.0 Demos & Practical INTRODUCTION

565 views • 27 slides

The security of Mozilla Firefoxs Extensions Kristjan Krips Topics Introduction The

The security of Mozilla Firefoxs Extensions Kristjan Krips Topics Introduction The extension model How could extensions be used for attacks - website defacement - phishing attacks - cross site scripting The attacks could result

517 views • 20 slides

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring:

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring: What is phishing? How phishing can damage a business What are the difgerent types of phishing? How to spot a phishing email What to do if

159 views • 12 slides

of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results

PhishEye: Xiao Han Nizar Kheir Live Monitoring Davide Balzarotti of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results [APWG Phishing Activity Trends Report 2 nd Quarter 2016] All time high record

921 views • 59 slides

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing 2. Strategic defense techniques 3. A new client based solution: DOMAntiPhish 4. Conclusions Nature of Phishing Statistics from the Anti

536 views • 31 slides

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke Tian, Steve T.K. Jan , Hang Hu, Danfeng Yao, Gang Wang Computer Science, Virginia Tech Phishing is a Big Th Threat Phishing: fraudulent attempt

411 views • 30 slides

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able to: Define phishing Identify signs of a potential phishing email Know where to report phishing emails to and how to report them

168 views • 15 slides

Kobalt Ratchet Max Cut -n- Clamp Patent Pending Two Sizes 10-inch 7-inch 1 Solid Steel

Kobalt Ratchet Max Cut -n- Clamp Patent Pending Two Sizes 10-inch 7-inch 1 Solid Steel Forged Jaws Provide Long Multiple Positioning Ratchet Lever Cutting and Clamping Forces Jaws-of-life Design Provides MAXIMUM Allows for Automatic

242 views • 8 slides

INCH Requirements <draft-ietf-inch-requirements-03.01.txt> IETF-60 SanDiego, August, 2004

INCH Requirements <draft-ietf-inch-requirements-03.01.txt> IETF-60 SanDiego, August, 2004 Issues Status: Req-Issue-001 :{01-12} Editorial nits TBD 02 use of MUST SHOULD etc. TBD 04 overall edit TBD 06 sec-2 citations TBD 06 sec-10

488 views • 10 slides

Phishing By: Joanna Georgiou Dhamija, R., Tygar, J. D., & Hearst, M. (2006, April 22). Why

Phishing By: Joanna Georgiou Dhamija, R., Tygar, J. D., & Hearst, M. (2006, April 22). Why Phishing Works. Gelernter, N., Kalma, S., Magnezi, B., & Porcilan, H. (2017). The Password Reset MitM Attack. What is Phishing? Dhamija, R.,

528 views • 50 slides

Federal Information Systems Security Education Association Spear Phishing Agenda Definition

Federal Information Systems Security Education Association Spear Phishing Agenda Definition of spear phishing Why is spear phishing so valuable to attackers Spear phishing defenses / countermeasures Training concepts and delivery

434 views • 8 slides

Extended INCident Handling Working Group (INCH)

Internet Engineering Task Force Extended INCident Handling Working Group (INCH) http://www.cert.org/ietf/inch/inch_interim_2004.html 12:00 16:00 Sunday, June 13 2004 Interim Meeting Budapest, Hungary Roman Danyliw, <rdd@cert.org>

396 views • 16 slides

Social Engineering Phishing & More Phishing Fake Email Accounts Real Email Accounts

Social Engineering Phishing & More Phishing Fake Email Accounts Real Email Accounts DrLaneA@mail.com b.miller@tcu.edu Bursar-SecureServices@me.com jbickford@necc.mass.edu No proof of identity Could already be compromised

343 views • 7 slides

Id Identify fy a Phishing Attack CWU Information Security Services Id Identify fy a Phishing

Id Identify fy a Phishing Attack CWU Information Security Services Id Identify fy a Phishing Attack An email address that tries to disguise itself as legitimate Outlook Team <msOutlook@outlook.com> Confirm Acount Details Hello

108 views • 7 slides

Analyzing the Effectiveness of Phishing at Network Level Sagar Mehta, Nitya Sundareswaran, Kevin

Analyzing the Effectiveness of Phishing at Network Level Sagar Mehta, Nitya Sundareswaran, Kevin D. Fairbanks, Nick Feamster Motivation Source - Phishing Activity Trends Report July, 2006 , Anti-Phishing workgroup Our work done from Jan

395 views • 24 slides

Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing Slide 1 Legitimate: Extended

Phishing Emails CS 142 Lecture Notes: Security Attacks: Phishing Slide 1 Legitimate: Extended Validation CS 142 Lecture Notes: Security Attacks: Phishing Slide 2 Obviously Illegitimate http://rusprory.mass.hc.ru/old_site/update/index.php CS

550 views • 10 slides