Security that nets malicious Web sites

Mar 23, 2007

Have you ever wondered how fraudulent or malicious websites can rank highly on search engines like Google or Yahoo? Queensland University of Technology IT researcher Professor Audun Josang said a website's ranking was determined by the number of people who visited the site - the more hits the higher the ranking.

But this system is fraught with danger and can be easily manipulated directing people to unreliable, low quality and fraudulent sites, according to Professor Josang.

"Just because a website ranks highly on a search engine doesn't mean it's a good website, in fact highly ranked websites can be malicious websites," he said.

To safeguard against this type of threat, Professor Josang believes the answer is to develop a new type of internet security system based on "reputation" where a community of users can rank the quality of a website.

He said this could then be used to warn others from visiting that site.

"For example most people are able to recognise a website that tries to trick them into giving confidential information (a phishing attack) when they see it," he said.

"With this system, aware users can rate such websites as malicious and as a result a phishing site will be quickly and universally recognised as dangerous, warning unsuspecting users against visiting that site."

Professor Josang said using this "social control" approach could provide protection against this type of online threat, by preventing attacks before they occurred.

"Social control methods, also known as soft security, adhere to common ethical norms by parties in a community.

"They make it possible to identify and sanction those participants who breach the norms and to recognise and reward members who adhere to them."

Professor Josang said in today's technologically advanced world of business, high ranking of a company's web page was a crucial factor for its success.

"This is why the control of search engines is so important and why it can be financially worthwhile for businesses to manipulate the system."

The central idea of Professor Josang's research is to take search engines one step further and by using them to make the internet a safe place to interact and transact.

"This project is about a new type of internet security that can be supported by search engines. There is a deception waiting for you around every corner on the internet and the technology we develop will protect people from that.

"I think in the future reputation systems, integrated into search engines, can be used to weed out such websites by giving them a low ranking and thereby making them invisible to unsuspecting users."

Source: Queensland University of Technology

Explore further: Researchers build first working memcomputer prototype

Related Stories

Microsoft sheds some of its ad business, mapping service

Jun 30, 2015

Microsoft is handing off some its digital advertising business to AOL and selling its street-image mapping operation to Uber, as the giant software company tries to focus on activities more relevant to its core business.

Social media provides a data goldmine for third parties

Jun 16, 2015

The history of human experiments often focuses on biomedical research and the gradual changes in acceptable practice and ethical considerations. But another class of human experiments that has had its own share of controversies ...

Recommended for you

Researchers build first working memcomputer prototype

14 hours ago

(Tech Xplore)—A combined team of researchers from the University of California and Politecnico di Torino in Italy has built, for the first time, a working memory-crunching computer (memcomputer) prototype. ...

EU open source software project receives green light

Jul 01, 2015

An open source software project involving the University of Southampton to extend the capacity of computational mathematics and interactive computing environments has received over seven million euros in EU funding.

Can computers be creative?

Jul 01, 2015

The EU-funded 'What-if Machine' (WHIM) project not only generates fictional storylines but also judges their potential usefulness and appeal. It represents a major advance in the field of computational creativity.

User comments : 0

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.