Microsoft nets phishing filter technology
617001
(InfoWorld) - MicrosoftÂ is using data-mining techniques from a third party in its Internet browsers toÂ guard against "phishing"Â attacks, where dubious Web sites try to harvest personal information from unknowing victims. Digital Resolve, of Norcross, Georgia, announced Tuesday that Microsoft is licensing data that comes from its Trusted Server technology, which crawls the Internet and builds lists of Web sites and their legitimate IP (Internet Protocol) addresses. The data will beÂ used by the antiphishing filterÂ in Microsoft's Internet Explorer versions 6 and 7 in addition to Windows Live Toolbar, a browser search box, Digital Resolve said. The technology focuses heavily on the Web sites of financial companies and e-commerce sites. It looks at 39 characteristics of a Web site, including IP address, location, domain and the Internet Service Provider, said Dennis Maicon, Digital Resolve's vice president for financial services solutions. It also checks how long a particular domain is valid based on its registration information. "When somebody goes to type in Barclays.com, it's able to then take that URL, resolve it to an IP address, and then check against a list to see if it is an authorized Barclays server," Maicon said. The company says its technology takes the opposite approach of so-called "blacklists," which are lists of reported phishing sites, said Susan Daw, Digital Resolve's director of marketing. Keeping updated blacklists can be difficult as phishing sites may only be active for a short time, Daw said. Rather than comparing a URL (uniform resource locator) to a list of bad sites, Digital Resolve's technology lets the phishing filter know which sites are good, Daw said. Microsoft is using a combination of technologies for the phishing filter, including blacklists. Daw said the technology is 100 percent successful for Web sites it has indexed. However, it's the first time the technology has been deployed, she said. For suspicious Web sites, such as a bank site with an irregular URL, the phishing filter triggers a warning to the user to either continue viewing the site or close the Web page. Digital Resolve said the technology can guard against "man-in-the-middle" style attacks, where an attacker collects a victim's login and password before passing the person to the legitimate site. Those attacks are often mounted from an irregular IP address that can be checked, according to Digital Resolve. Â ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
204799
A new flaw has been discovered in Microsoft&#39;s Internet Explorer browser that allows malicious users to create fake sites that could lead to new email phishing scams.
319877
From disguising applets to look like part of Windows to co-opting security tools, Web crooks use a variety of methods to bypass your system's safeguards.
118427
Microsoft&#39;s E-mail-filter technology, Sender ID, is unpopular with open-source advocates but popular with spammers, who are using it to bypass other filters.
417838
New features designed to alert users if the site they are visiting is legitimate or a phishing site.
250864
A trio of new and unpatched vulnerabilities in Microsoft Windows were made public on security mailing lists over the weekend. By Gregg Keizer.
55130
Internet Security Systems has announced that it has preemptive protection available for the four high risk vulnerabilities announced by Microsoft on Wednesday.
178847
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2.0 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
100561
Blog: Symantec technology creates new protection for Internet Explorer users.
181199
Interesting tidbit that was Slashdotted earlier - Netcraft has released an anti-phishing toolbar that leverages the enormous database of web sites the organization manages.
543022
Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net.
693586
New utility from PivX keeps intruders out of Windows systems.
362606
Microsoft issued a patch for a vulnerability in its server software that could allow an attacker to spoof trusted Internet content.
577751
SurfControl (LSE:SRF), a leading provider of global on-demand, network,  and endpoint IT security solutions, announced the release of the  SurfControl Web Filter Appliance with Microsoft ISA 2006 support.
475065
A new product from Microsoft Corp.&#39;s hardware group aims to eliminate the need for that not-so-secret list of user names and passwords hidden in the typical desk drawer.
718095
Microsoft said it plans to offer tools based on Giant&#39;s technology that will help protect Windows PCs from spyware and other deceptive software.
121787
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net.