Microsoft nets phishing filter technology

Microsoft is using new data-mining techniques from a third party in its latest Internet browser to guard against phishing attacks.

Microsoft is using data-mining techniques from a third party in its Internet browsers to guard against "phishing" attacks, where dubious Web sites try to harvest personal information from unknowing victims.

Digital Resolve announced Tuesday that Microsoft is licensing data that comes from its Trusted Server technology, which crawls the Internet and builds lists of Web sites and their legitimate IP (Internet Protocol) addresses.

The data will be used by the antiphishing filter in Microsoft's Internet Explorer versions 6 and 7 in addition to Windows Live Toolbar, a browser search box, Digital Resolve said.

The technology focuses heavily on the Web sites of financial companies and e-commerce sites. It looks at 39 characteristics of a Web site, including IP address, location, domain and the Internet Service Provider, said Dennis Maicon, Digital Resolve's vice president for financial services solutions. It also checks how long a particular domain is valid based on its registration information.

"When somebody goes to type in Barclays.com, it's able to then take that URL, resolve it to an IP address, and then check against a list to see if it is an authorized Barclays server," Maicon said.

The company says its technology takes the opposite approach of so-called "blacklists," which are lists of reported phishing sites, said Susan Daw, Digital Resolve's director of marketing. Keeping updated blacklists can be difficult as phishing sites may only be active for a short time, Daw said.

Rather than comparing a URL (uniform resource locator) to a list of bad sites, Digital Resolve's technology lets the phishing filter know which sites are good, Daw said. Microsoft is using a combination of technologies for the phishing filter, including blacklists.

Daw said the technology is 100 percent successful for Web sites it has indexed. However, it's the first time the technology has been deployed, she said.

For suspicious Web sites, such as a bank site with an irregular URL, the phishing filter triggers a warning to the user to either continue viewing the site or close the Web page.

Digital Resolve said the technology can guard against "man-in-the-middle" style attacks, where an attacker collects a victim's login and password before passing the person to the legitimate site. Those attacks are often mounted from an irregular IP address that can be checked, according to Digital Resolve.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Cool Tech

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Breitling Superocean Heritage Chronographe 44

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?