Website Risk Assessment System for Anti-Phishing

Phishing attacks steal a user's identity data and financial account credentials using social engineering and technical spoofing techniques. Many counter measures have been developed to protect user's sensitive information from phishing attacks. Although most approaches use both website black lists (WBLs) and website white lists (WWLs), these approaches have several weakneksses. This paper presents a novel anti-phishing Website Risk Assessment System (WRAS). WRAS computes a security risk index of website and generates warnings as to the website trustworthiness. Therefore, it can protect inexperienced users against spoofed website-based phishing attacks and exploit-based phishing attempts that may occur from legitimate web pages.