Understand the risks of deceptive IDNs WhoisXML API Data Supports A Comprehensive Study Of Deceptive Internationalized Domain Names (IDNs) Cyber attackers create domain names that are visually similar to those of legitimate/popular brands by abusing valid Internationalized Domain Names (IDNs). Daiki Chiba of NTT Secure Platform Laboratories, Tokyo, Japan, and his co-authors, in collaboration with Waseda University, Tokyo, Japan, have recently published, perhaps, the most comprehensive study on this kind of attacks. To accomplish their goal, the authors needed a complete list of all registered domains. They opted for the WHOIS database provided by WhoisXML API, which is possibly the most comprehensive list of this kind on the market. They processed over 294 million domains (including IDNs and non-IDNs) under 1,435 TLDs, which constituted a solid basis for the study. Summary Of The Research Paper The paper systematized such domain names, which are called deceptive IDNs, and aims to understand the risks associated with them. A new system called DOMAINSCOUTER is proposed to detect more types of deceptive IDNs than previously proposed systems and calculate a deceptive IDN score, a new metric indicating the number of users likely to be misled by a deceptive IDN. Online surveys were conducted to examine vulnerabilities in user perceptions when encountering deceptive IDNs and evaluations are made to confirm that the deceptive IDN score they proposed reflects the tendency of users to be deceived by the attacks. The most comprehensive measurement study is performed on the deceptive IDNs detected by the proposed DOMAINSCOUTER, covering over 4.4 million registered real-world IDNs under 570 top level domains (TLDs). Discussion on the practical countermeasures that stakeholders can take against deceptive IDNs. Suggestions are provided for client applications, domain registrars/registries, domain owners, and certificate authorities (CA) on how to reduce the spread of deceptive IDNs. Understand the Risks of Deceptive IDNs Read Research Paper For any inquiries email us at support@whoisxmlapi.com whoisxmlapi.com This email was sent to abdulrohman.fdul@gmail.com why did I get this? unsubscribe from this list update subscription preferences Whois API, LLC · 340 S Lemon Ave # 1362 · Walnut, CA 91789 · USA
No comments:
Post a Comment