INCH Extensions for Phishing Pat Cain pcain@coopercain.com - PowerPoint PPT Presentation

Jul 18, 2023 •120 likes •206 views

INCH Extensions for Phishing Pat Cain pcain@coopercain.com Draft-ietf-inch-phishingextns-01 WG accepted doc in Minnesota Draft -00 came out early June -01 came out early July -02 should come out mid-August Mods from jevans-00

INCH Extensions for Phishing Pat Cain pcain@coopercain.com
Draft-ietf-inch-phishingextns-01 • WG accepted doc in Minnesota • Draft -00 came out early June • -01 came out early July • -02 should come out mid-August
Mods from jevans-00 to -00 • Fixed the DTD and the Schema • Moved PhraudReport from top-level to EventData • Added support for: – other e-fraud – malware – basic large-scale spam reporting • Added more words
• +------------------+ • | Incident | • +------------------+ • | ENUM purpose |<>----------[ IncidentID ] • | ENUM restriction |<>--{0..1}--[ AlternativeID ] • | |<>--{0..1}--[ RelatedActivity ] • | |<>--{0..*}--[ Description ] • | |<>--{1..*}--[ Assessment ] • | |<>--{0..*}--[ Method ] • | |<>--{0..1}--[ DetectTime ] • | |<>--{0..1}--[ StartTime ] • | |<>--{0..1}--[ EndTime ] • | |<>----------[ ReportTime ] • | |<>--{1..*}--[ Contact ] • | |<>--{0..*}--[ Expectation ] • | |<>--{0..1}--[ History ] • | |<>--{0..*}--[ EventData ] • | | --> AdditionalData ] • | | --> PhraudReport (added) • +------------------
• +-----------------+ • | PhraudReport | • +-----------------+ • | ENUM Version |<>--(0..*)--[ PhishNameRef ] • | ENUM FraudType |<>--(0..*)--[ PhishNameLocalRef ] • | |<>--(0..*)--[ FraudParameter ] • | |<>--(0..*)--[ FraudedBrandName ] • | |<>--(1..*)--[ LureSource ] • | |<>----------[ OriginatingSensor ] • | |<>--(0..1)--[ EmailRecord ] • | |<>--(0..*)--[ DCSite ] • | |<>--(0..*)--[ TakeDownInfo ] • | |<>--(0..*)--[ ArchivedData ] • | |<>--(0..*)--[ RelatedData ] • | |<>--(0..*)--[ CorrelationData ] • | |<>--(0..1)--[ PRComments ] • +-----------------+
Modes from -00 to -01 • Fixed the DTD and the Schema • Checked consistently in DTD/Schema/Words
Modes from -01 to -02 • Fix the DTD and the Schema

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

IODEF Extensions for Phishing and Other E-Crimeware Patrick Cain Latest Status New draft

IODEF Extensions for Phishing and Other E-Crimeware Patrick Cain Latest Status New draft out. Missed deadline by a little; should show up in repository soon. draft-ietf-inch-phishingextns-02 One Technical change Many

452 views • 5 slides

Phishing Reports using the INCH Format Pat Cain The Cooper-Cain Group 09 March 2005 IETF #62

Phishing Reports using the INCH Format Pat Cain The Cooper-Cain Group 09 March 2005 IETF #62 Some History The Financial Services Technology Consortium (www.fstc.org) ran a counter-phishing project last fall The AntiPhishing Working

483 views • 13 slides

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing

The Art of Phishing : What you should know Arvind Vishwakarma 05/24/2019 Agenda 1. Phishing In a Nutshell 2. Phishing Types & Techniques 3. Phishing Stats & Modern Trends 4. Case-Study 5. Stay Safe 2 Speaker ABOUT ME

478 views • 24 slides

OK OK OK Image circle OK OK OK 1/2.5-inch 1/1.8-inch 1/2-inch 1 VT4Z1450 1 14 -50mm

VT4Z1450 1 14 -50mm F2.6 6MP IR-Corrected 1 1 inch and 1/1.2 inch image size spec. 1/1.2-inch 1-inch Sensor size 2/3-inch OK OK OK Image circle OK OK OK 1/2.5-inch 1/1.8-inch 1/2-inch 1 VT4Z1450 1 14 -50mm F2.6 6MP

499 views • 15 slides

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing

Phishing Fishing or Phishing? Definition Phishing: an attempt to trick victims into sharing sensitive information such as passwords, usernames, and credit card details for malicious reasons. Phishing can be in the form of emails, social

530 views • 20 slides

Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the

School of Fin ine Arts Retreat IT Presentation Rick OToole Phishing Awareness What is Phishing? Phishing is the attempt to obtain personal information such as passwords and logins for malicious purposes. By appearing to be legitimate the

255 views • 13 slides

VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of

THE STATE OF PHISHING ATTACK VECTOR Table of Content Bio What phishing is? Types of Phishing Anatomy of Phishing Counter Measures Reports on Phishing Isaac K. Acheampong Facilities Manager BSc IT, Dip. IT, Sec+ STATE OF

711 views • 34 slides

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing?

Tech Briefing Email Security (Phishing) VPN File Storage Phishing Awareness What is Phishing? Phishing email messages, websites, and phone calls are designed to steal money or sensitive information. Cybercriminals can do this by installing

264 views • 24 slides

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing

PHISHING IN DEPTH (ATTACKS & MITIGATIONS) Table of Content 1.0 Introduction 2.0 Phishing 3.0 Phishing kit 4.0 Types of Phishing 5.0 Avoidance Techniques 6.0 Effect of Phishing on Businesses 7.0 Demos & Practical INTRODUCTION

565 views • 27 slides

The security of Mozilla Firefoxs Extensions Kristjan Krips Topics Introduction The

The security of Mozilla Firefoxs Extensions Kristjan Krips Topics Introduction The extension model How could extensions be used for attacks - website defacement - phishing attacks - cross site scripting The attacks could result

517 views • 20 slides

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring:

Training employees to recognise and avoid phishing threats Agenda Today, we will be exploring: What is phishing? How phishing can damage a business What are the difgerent types of phishing? How to spot a phishing email What to do if

159 views • 12 slides

of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results

PhishEye: Xiao Han Nizar Kheir Live Monitoring Davide Balzarotti of Sandboxed Phishing Kits Summary Motivation Sandboxed phishing kits Implementation Results [APWG Phishing Activity Trends Report 2 nd Quarter 2016] All time high record

921 views • 59 slides

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing

Anti-Phishing Security Strategy Angelo P. E. Rosiello Agenda 1. Brief introduction to phishing 2. Strategic defense techniques 3. A new client based solution: DOMAntiPhish 4. Conclusions Nature of Phishing Statistics from the Anti

536 views • 31 slides

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke

Ne Needle in a Haystack: : Tracking Do Down Elite Ph Phishing g Dom Domains in the Wild Ke Tian, Steve T.K. Jan , Hang Hu, Danfeng Yao, Gang Wang Computer Science, Virginia Tech Phishing is a Big Th Threat Phishing: fraudulent attempt

411 views • 30 slides

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able

Dont Take The Bait: How To Stay Safe From Phishing Goals After this section, youll be able to: Define phishing Identify signs of a potential phishing email Know where to report phishing emails to and how to report them

168 views • 15 slides

Kobalt Ratchet Max Cut -n- Clamp Patent Pending Two Sizes 10-inch 7-inch 1 Solid Steel

Kobalt Ratchet Max Cut -n- Clamp Patent Pending Two Sizes 10-inch 7-inch 1 Solid Steel Forged Jaws Provide Long Multiple Positioning Ratchet Lever Cutting and Clamping Forces Jaws-of-life Design Provides MAXIMUM Allows for Automatic

242 views • 8 slides

Panel III LLL and practical training links, good practices Marek Gruszczyski Warsaw School of

Panel III LLL and practical training links, good practices Marek Gruszczyski Warsaw School of Economics SGH June 12, 2012 SGH Mission As it seeks to impart a European dimension to its academic activity, SGH combines an over

274 views • 9 slides

1. National Legal Framework 2. RR Background information 3. Inspections of RR 1. National Legal

Overview of the DRCongos Regulatory Boby Supervision of the Research Reactor TRIGA Mark II By Mr Petrus BOMPERE LEMO CNPRI (Comit National de Protection contre les Rayonnements Ionisants):The sole Regulatory Body of DR Congo Cairo,

556 views • 16 slides

Securing Information Systems Reading: Laudon & Laudon chapter 7 Additional Reading: Brien

Securing Information Systems Reading: Laudon & Laudon chapter 7 Additional Reading: Brien & Marakas chapter 11 COMP 5131 1 Outline System Vulnerability and Abuse Business Value of Security and Control Establishing

734 views • 40 slides

Market Outlook March 2018 1 Equity Markets 2 Key Events February 2018 Indias 3Q GDP

Market Outlook March 2018 1 Equity Markets 2 Key Events February 2018 Indias 3Q GDP rebounded to 7.2% as negative supply shocks on account of the demonetization and GST seem to be fading away. Investment growth surged to double

944 views • 76 slides

Everyones a Target Criminals are Always Two Steps Ahead 90% of all cybercrime costs are

Hackers are Equal Opportunity Businessmen: Everyones a Target Criminals are Always Two Steps Ahead 90% of all cybercrime costs are caused by web attacks, malicious code and malicious insiders. Kaspersky 60% of enterprises said

449 views • 13 slides

T ARGET : YOU! Theyre hacking us, the employees. LinkedIn: A reconnaissance map to . .

Y U: T HE T ARGET Kurt Willey Beth Tinsman T ARGET : YOU! Theyre hacking us, the employees. LinkedIn: A reconnaissance map to . . . company hierarchies. Email: a way to inject a virus inside the organizaGon network, bypassing the

588 views • 32 slides

Enterprise Security with Expanded Network Boundaries Dr. Zhijun (William) Zhang Lead Security

Enterprise Security with Expanded Network Boundaries Dr. Zhijun (William) Zhang Lead Security Architect at The World Bank Group Data Breaches in the News Large-scale breaches are now a regular occurrence across industry and geography

221 views • 18 slides

! Hello! Gavin Dennis Information Security Consultant Symptai Consulting Ltd. & OpenWave

Cyber-Attack and Security: PUTTING THE AUDIT COMMITTEE ON HIGH ALERT ! Hello! Gavin Dennis Information Security Consultant Symptai Consulting Ltd. & OpenWave Information Security Ltd. LETS FOCUS ON 1 EVERYONE IS IMPORTANT IN

406 views • 22 slides