Web Security

Stanford Anti-Phishing Browser Extensions

Browser Extensions

The following Stanford Security Lab browser extensions defend against phishing attacks:

SpoofGuard detects when you visit a phishing page and warns you.
PwdHash generates phishing-resistant passwords.
SafeCache protects your browser cache from context-aware phishing attacks.
SafeHistory protects your visited links from context-aware phishing attacks.
See also: All web security projects

Publications

• Client-side defense against web-based identity theft.
  Neil Chou, Robert Ledesma, Yuka Teraguchi, Dan Boneh, and John C. Mitchell
  In Proc. of the 11th Annual Network and Distributed System Security Symposium (NDSS 2004)
• Stronger Password Authentication Using Browser Extensions
  Blake Ross, Collin Jackson, Nick Miyake, Dan Boneh, and John C. Mitchell
  In Proc. of the 14th USENIX Security Symposium. (USENIX Security 2005)
• Protecting Browser State from Web Privacy Attacks
  Collin Jackson, Andrew Bortz, Dan Boneh, and John C. Mitchell
  In Proc. of the 15th International World Wide Web Conference. (WWW 2006)
• An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks
  Collin Jackson, Dan Simon, Desney Tan, and Adam Barth
  In Proc. of the 2007 Workshop on Usable Security. (USEC 2007)
• Exposing Private Information by Timing Web Applications
  Andrew Bortz, Dan Boneh, and Palash Nandy
  In Proc. of the 16th International World Wide Web Conference. (WWW 2007)

Staff

• Collin Jackson
• Andrew Bortz
• Adam Barth
• Dan Boneh
• John Mitchell