The Experts below are selected from a list of 2001 Experts worldwide ranked by ideXlab platform
Trilce Navarrete - One of the best experts on this subject based on the ideXlab platform.
-
classifying Web genres in context a case study documenting the Web genres used by a software engineer
Information Processing and Management, 2008Co-Authors: Michela Montesi, Trilce NavarreteAbstract:This case study analyzes the Internet-based resources that a software engineer uses in his daily work. Methodologically, we studied the Web Browser History of the participant, classifying all the Web pages he had seen over a period of 12 days into Web genres. We interviewed him before and after the analysis of the Web Browser History. In the first interview, he spoke about his general information behavior; in the second, he commented on each Web genre, explaining why and how he used them. As a result, three approaches allow us to describe the set of 23 Web genres obtained: (a) the purposes they serve for the participant; (b) the role they play in the various work and search phases; (c) and the way they are used in combination with each other. Further observations concern the way the participant assesses quality of Web-based resources, and his information behavior as a software engineer.
Michela Montesi - One of the best experts on this subject based on the ideXlab platform.
-
classifying Web genres in context a case study documenting the Web genres used by a software engineer
Information Processing and Management, 2008Co-Authors: Michela Montesi, Trilce NavarreteAbstract:This case study analyzes the Internet-based resources that a software engineer uses in his daily work. Methodologically, we studied the Web Browser History of the participant, classifying all the Web pages he had seen over a period of 12 days into Web genres. We interviewed him before and after the analysis of the Web Browser History. In the first interview, he spoke about his general information behavior; in the second, he commented on each Web genre, explaining why and how he used them. As a result, three approaches allow us to describe the set of 23 Web genres obtained: (a) the purposes they serve for the participant; (b) the role they play in the various work and search phases; (c) and the way they are used in combination with each other. Further observations concern the way the participant assesses quality of Web-based resources, and his information behavior as a software engineer.
Lukasz Olejnik - One of the best experts on this subject based on the ideXlab platform.
-
Web Browser History detection as a real world privacy threat
European Symposium on Research in Computer Security, 2010Co-Authors: Artur Janc, Lukasz OlejnikAbstract:Web Browser History detection using CSS visited styles has long been dismissed as an issue of marginal impact. However, due to recent changes in Web usage patterns, coupled with Browser performance improvements, the long-standing issue has now become a significant threat to the privacy of Internet users. In this paper we analyze the impact of CSS-based History detection and demonstrate the feasibility of conducting practical attacks with minimal resources. We analyze Web Browser behavior and detectability of content loaded via standard protocols and with various HTTP response codes. We develop an algorithm for efficient examination of large link sets and evaluate its performance in modern Browsers. Compared to existing methods our approach is up to 6 times faster, and is able to detect up to 30,000 visited links per second. We present a novel Web application capable of effectively detecting clients' browsing histories and discuss real-world results obtained from 271,576 Internet users. Our results indicate that at least 76% of Internet users are vulnerable to History detection, including over 94% of Google Chrome users; for a test of most popular Internet Websites we were able to detect, on average, 62.6 (median 22) visited locations per client. We also demonstrate the potential to profile users based on social news stories they visited, and to detect private data such as zipcodes or search queries typed into online forms.
Artur Janc - One of the best experts on this subject based on the ideXlab platform.
-
Web Browser History detection as a real world privacy threat
European Symposium on Research in Computer Security, 2010Co-Authors: Artur Janc, Lukasz OlejnikAbstract:Web Browser History detection using CSS visited styles has long been dismissed as an issue of marginal impact. However, due to recent changes in Web usage patterns, coupled with Browser performance improvements, the long-standing issue has now become a significant threat to the privacy of Internet users. In this paper we analyze the impact of CSS-based History detection and demonstrate the feasibility of conducting practical attacks with minimal resources. We analyze Web Browser behavior and detectability of content loaded via standard protocols and with various HTTP response codes. We develop an algorithm for efficient examination of large link sets and evaluate its performance in modern Browsers. Compared to existing methods our approach is up to 6 times faster, and is able to detect up to 30,000 visited links per second. We present a novel Web application capable of effectively detecting clients' browsing histories and discuss real-world results obtained from 271,576 Internet users. Our results indicate that at least 76% of Internet users are vulnerable to History detection, including over 94% of Google Chrome users; for a test of most popular Internet Websites we were able to detect, on average, 62.6 (median 22) visited locations per client. We also demonstrate the potential to profile users based on social news stories they visited, and to detect private data such as zipcodes or search queries typed into online forms.
Ali Yazdian Varjani - One of the best experts on this subject based on the ideXlab platform.
-
new rule based phishing detection method
Expert Systems With Applications, 2016Co-Authors: Mahmood Moghimi, Ali Yazdian VarjaniAbstract:We propose two feature sets to determine the Webpage identity.Our proposed features do not have any dependency to 3rd-party services.We proposed a rule-based method by extracting the hidden knowledge from our model.We provide an extension called PhishDetector to detect phishing attacks.Experiments show that PhishDetector detects zero-day phishing with high accuracy. In this paper, we present a new rule-based method to detect phishing attacks in internet banking. Our rule-based method used two novel feature sets, which have been proposed to determine the Webpage identity. Our proposed feature sets include four features to evaluate the page resources identity, and four features to identify the access protocol of page resource elements. We used approximate string matching algorithms to determine the relationship between the content and the URL of a page in our first proposed feature set. Our proposed features are independent from third-party services such as search engines result and/or Web Browser History. We employed support vector machine (SVM) algorithm to classify Webpages. Our experiments indicate that the proposed model can detect phishing pages in internet banking with accuracy of 99.14% true positive and only 0.86% false negative alarm. Output of sensitivity analysis demonstrates the significant impact of our proposed features over traditional features. We extracted the hidden knowledge from the proposed SVM model by adopting a related method. We embedded the extracted rules into a Browser extension named PhishDetector to make our proposed method more functional and easy to use. Evaluating of the implemented Browser extension indicates that it can detect phishing attacks in internet banking with high accuracy and reliability. PhishDetector can detect zero-day phishing attacks too.