You’ve Been Tricked! A User Study of the Effectiveness of Typosquatting Techniques

Spaulding, Jeffrey; Upadhyaya, Shambhu; Mohaisen, Aziz

doi:10.1109/icdcs.2017.221

Cited by 6 publications

(4 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such attacks include various variants, i.e. typosquatting [63,64,5,65,66,67,68,69], bitsquatting [70,71,72], combosquatting [41], and soundsquatting [73]. Domain name squatting becomes popular as an attack vector to start many other types of attacks [66,65].…”

Section: Dns Threat Landscapementioning

confidence: 99%

“…Domain name squatting practices expose users to a variety of vulnerabilities, such as trademark infringement, monetization, malware, and scams. There exists several research works that attempted to investigate the landscape and impact of the domain squatting [65,67,41,68,66,69,72], which we define below.…”

Section: Domain Name Squattingmentioning

confidence: 99%

“…Spaulding et al [68,69] have conducted a user study to understand the effectiveness of the typosquatting strategies in deceiving users. The behaviour of users, who have been exposed to several typosquatting URLs, have been examined in an attempt to figure out whether their behavior is improved by security education and increasing their awareness about typosquatters.…”

Section: Typosquattingmentioning

confidence: 99%

See 2 more Smart Citations

Domain Name System Security and Privacy: A Contemporary Survey

Khormali¹,

Park²,

Alasmary³

et al. 2020

Preprint

View full text Add to dashboard Cite

The domain name system (DNS) is one of the most important components of today's Internet, and is the standard naming convention between human-readable domain names and machine-routable IP addresses of Internet resources. However, due to the vulnerability of DNS to various threats, its security and functionality have been continuously challenged over the course of time. Although, researchers have addressed various aspects of the DNS in the literature, there are still many challenges yet to be addressed. In order to comprehensively understand the root causes of the vulnerabilities of DNS, it is mandatory to review the various activities in the research community on DNS landscape. To this end, this paper surveys more than 170 peer reviewed papers, which are published in both top conferences and journals in last ten years, and summarizes vulnerabilities in DNS and corresponding countermeasures. This paper not only focuses on the DNS threat landscape and existing challenges, but also discusses the utilized data analysis methods, which are frequently used to address DNS threat vulnerabilities. Furthermore, we looked into the DNS threat landscape from the view point of the involved entities in the DNS infrastructure in an attempt to point out more vulnerable entities in the system.

show abstract

Section: Dns Threat Landscapementioning

confidence: 99%

Section: Domain Name Squattingmentioning

confidence: 99%

Section: Typosquattingmentioning

confidence: 99%

See 1 more Smart Citation

Domain Name System Security and Privacy: A Contemporary Survey

Khormali¹,

Park²,

Alasmary³

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

“…DNS allows the users to use easier text-based domain names to read when compared using the numeric address form provides IP address to an Internet access service as the service website. At the end of 2015 data showed nearly three hundred million website domain names were registered [1]. Use of the Internet has been developed rapidly around the world resulted in an increasing number of websites and the number of visits on the website.…”

Section: Introductionmentioning

confidence: 99%

Typosquatting Potential on the Official Website (An Empirical Study of Popular Webites in Indonesia)

Sasongko¹,

Suprapto²,

Hendradi³

2021

Proceedings of the 2nd Borobudur International Symposium on Science and Technology (BIS-STE 2020)

View full text Add to dashboard Cite

At the time of typing the website address (URL), the users often make mistakes (typos) that are unable to visit the desired website. The situation becomes worse when the wrong URL pointing to other websites that do not wish to be visited by the user and may be made available for the aim of cyber-crime. This condition is called Typosquatting. Typosquatting is often used to carry out dangerous cyber-attacks. Research conducted will focus on the potential Typosquatting popular website domain in Indonesia based on Similar web and Alexa rankings. The purpose of this research is to determine the potential for Typosquatting attacks on the popular website domain. Potential observation for Typosquatting was carried out using the Domain Security Test owned by Immuniweb. The result obtained from observation is the number of active domains contained in Typosquatting potential domain has a percentage of 90 % and 26 % potential domain of Typosquatting visited by the users. The most identified Typosquatting model is substitution and addition, meanwhile the most widely used of the website purpose is Hit Stealing and Parking Domain / For Sale. The letters on the left and right of the type target letter have the potential to be more often cause typo if it is compared to the letters which are above and below the type target letter.

show abstract