AplusWebMaster
Topic Starter
FYI…
- http://www.pcadvisor.co.uk/news/index.cfm?newsid=7659
November 21, 2006
"Antiphishing toolbars designed to protect users from web scams are failing to fulfill their promise… The new study [pdf*], Finding Phish: An Evaluation of Anti-Phishing Toolbars, was conducted by researchers at Carnegie Mellon University in Pittsburgh, backed by organisations as worthily anodyne as the US National Science Foundation and the US Army Research Office. The study looked at ten browser toolbars: Microsoft Explorer 7, eBay, Google, Netcraft (Mozilla), Netscape, Cloudmark (Mozilla), Earthlink, Geotrust’s TrustWatch, and Stanford University’s Spoofguard, and McAfee’s SiteAdvisor. Even the best of the bunch - Earthlink, Netcraft, Google, Cloudmark, and Explorer 7 - detected only 85 percent of fraudulent websites, a good but far from secure level of effectiveness. The rest scored under the 50 percent mark… McAfee claimed after the event that the product was not intended to perform as an anti-phishing filter… It is the effectiveness of the heuristics used to identify sites that matters, and the usability of software design from the point of view of the users themselves."
* http://www.cylab.cmu.edu/files/cmucylab06018.pdf
- http://www.pcadvisor.co.uk/news/index.cfm?newsid=7659
November 21, 2006
"Antiphishing toolbars designed to protect users from web scams are failing to fulfill their promise… The new study [pdf*], Finding Phish: An Evaluation of Anti-Phishing Toolbars, was conducted by researchers at Carnegie Mellon University in Pittsburgh, backed by organisations as worthily anodyne as the US National Science Foundation and the US Army Research Office. The study looked at ten browser toolbars: Microsoft Explorer 7, eBay, Google, Netcraft (Mozilla), Netscape, Cloudmark (Mozilla), Earthlink, Geotrust’s TrustWatch, and Stanford University’s Spoofguard, and McAfee’s SiteAdvisor. Even the best of the bunch - Earthlink, Netcraft, Google, Cloudmark, and Explorer 7 - detected only 85 percent of fraudulent websites, a good but far from secure level of effectiveness. The rest scored under the 50 percent mark… McAfee claimed after the event that the product was not intended to perform as an anti-phishing filter… It is the effectiveness of the heuristics used to identify sites that matters, and the usability of software design from the point of view of the users themselves."
* http://www.cylab.cmu.edu/files/cmucylab06018.pdf