Phishing
From Blindside
Contents |
[edit] What is it
Brief abstract of the emerging technology
[edit] Impact & Maturity assessment
We assign this an Impact Level of 2, as although phishing is a growing issue, it is still a relatively infrequent crime, and the public is being educated by commercial organisations about its dangers and how to avoid it. The major information issue associated with phishing (as with all cybercrime) is the part it plays in the erosion of trust in online information and information gathering.
We assign this a Maturity Level of 2, as we foresse that phishing will evolve to more sophisticated practice as current illegal schemes become less effective.
[edit] Information Assurance issues
Answer: what seem to be the likely information assurance issues of the emerging technology under discussion
[edit] Timescale
According to a Ross Anderson paper for the Federal reserve:It started in 2003, with half-a-dozen reported attacks. These were both crude and greedy; the attackers asked for all sorts of personal information, and even for ATM PINs, which made many customers smell a rat. By 2004 the phishermen had raised their game, using copies of genuine bank emails and websites, and better psychology. By 2006, losses had climbed to £35m in the UK, and nine figures in the USA. Growth continues at a phenomenal rate, with the target list now including not just large banks but also nonbank payment services such as PayPal and large retailers like Amazon.
[edit] Examples
[edit] Comments (attributed)
When a main-street bank’s own fraud department can’t tell its own spam from phish, what can reasonably be expected of bank customers? - Ross Anderson, Professor of Security Engineering, Cambridge University
[edit] Organisations
Groups which have a particular contribution or point of view about this emerging technology, eg tech businesses, user organisations or advocacy groups
[edit] Documents & research papers
Very brief abstracts or links to informative documents, presentations or academic research papers about this emerging technology
[edit] Experts (academic, practitioner)
Links to academic experts or expert practitioners and commentators on this emerging technology
