Anti-Phishing Image Captcha Validation Scheme using Visual Cryptography

Abstract

Evolution in the world of internet has given rise to several online attacks and the most common attack is phishing. Victims are tricked into providing such information by a combination of spoofing techniques and social engineering. Phishing is an attempt by an individual or a group to acquire sensitive information such as usernames, passwords, and credit card details from unsuspecting victims. In this paper we have proposed a new approach named as "Anti-phishing image captcha validation scheme using visual cryptography" to solve the problem of phishing. Phishing websites are targeting the customers of banks and online payment services to steal sensitive data from victims. The use of images is explored to preserve the privacy of image captcha by decomposing the original image captcha into two shares that are stored in separate database servers such that the original image captcha can be revealed only when both are simultaneously available, the individual sheet images do not reveal the identity of the original image captcha. Once the original image captcha is revealed to the user it can be used as the password. Several solutions have been proposed to tackle phishing. Dynamically generating the captcha image by the system is one of the major advantage of the system. In this study, the authors shed light on the important features that distinguish phishing websites from legitimate ones and assess how good rule-based data mining classification techniques are in predicting phishing websites and which classification technique is proven to be more reliable.