|
iTrustPage: Pretty Good Phishing Protection |
Requires Firefox 1.5 or Firefox 2.0. Download from the Firefox homepage
iTrustPage prevents an Internet user from filling out untrustworthy Web forms. iTrustPage assumes that a user's browser is trusted (when the browser is compromised, the user can be subject to attacks much more serious than phishing.) iTrustPage's design is centered around three observations:
When visiting a form, iTrustPage determines whether or not the form is trustworthy. This is determined based on three factors:
When a user attempts to fill-out an untrustworthy Web form, iTrustPage tries to find whether the untrustworthy form is the form the user intended to fill. For this, iTrustPage asks the user to describe the form as if searching for the form on Google. Once the user enters keywords describing the form, iTrustPage performs a search on Google. If the form's top-level domain is found among the top-10 Google's answers, iTrustPage allows the user to pass through.
If the form's top-level domain is not found among the top-10 answers returned by Google, the user is presented a list of Web pages that match the user's intent. At this step, the user has two options: (1) choose one of the trustworthy Web pages returned by Google; or (2) refine their form's description.
If the user chooses to refine the form's description, the step above is repeated. iTrustPage allows the user a fixed number of search refinements based on how high the page is ranked. Once this number is exhausted, iTrustPage gives the user a third option: Proceed anyway. Once the user clicks this third option, all bets are off.
