13–14 Oct 2018
Okura Hotel
Europe/Amsterdam timezone

Real-time Detection of Internationalized Domain Name-Based Brand Abuse

14 Oct 2018, 09:30
30m
Heian I/II (Okura Hotel)

Heian I/II

Okura Hotel

Ferdinand Bolstraat 333 1072 LH Amsterdam NL
Standard Presentation Public Workshop Joint OARC & CENTR-Tech Public Workshop

Speaker

Mr Mike Schiffman (Engineering Team Lead, Farsight Security, Inc)

Description

Internet bad actors have long been known to register look-alike domains and stand up phishing sites and create spam campaigns in order to hoodwink users into revealing personal information including login credentials, credit card numbers and social security numbers. Detecting and combatting criminal activity related to look-alike domains becomes a much more difficult problem when you start adding International Domain Names (IDNs) into that mix.

This talk will focus on Farsight's work with real-time detection of in-use IDN homographs.

This presentation will feature:

  • Discussion of our method of detection/collection
  • Overview of the analysis of a large corpus of "a year in the life of IDNs" including in-the-weeds analysis using various views of the corpus
  • Gallery/discussion of a few real-world examples of detected (previously-) live phishing sites
  • Call-to-action for awareness and up-stream mitigation

Summary

This talk will focus on Farsight's work with real-time detection of in-use IDN homographs.

Talk Duration 30 Minutes

Primary author

Mr Mike Schiffman (Engineering Team Lead, Farsight Security, Inc)

Presentation materials