DESIGN AND IMPLEMENTATION OF AN ONLINE DETECTION AND PREVENTION OF PHISHING ATTACK
ABSTRACT
Phishing attack is a simplest way to obtain sensitive information from innocent users. The aim of the phishers is to acquire critical information like username, password and bank account details. The aim of the study is to design and implement An Online Detection and Prevention of Phishing Attack. In achieving this aim, the following specific objectives were laid out to develop an application software that will provide information about the current website phishing threats and prevention measures, evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques and detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts. The motivation that led to this proposed system is that Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques. The methodology adopted in this study is the structured system analysis and design methodology (SSADM) which is a technical approach for analyzing and designing an application or system by applying object throughout the software development process. The programming language used is HTML, CSS, JAVASCRIPT, PHP, SQL and JQUERY. The reason why web programming languages was used is because, it is platform independent and it is a web based application. The study will provide information about phishing attacks/threat towards website users which will be relevant to the Financial Institutions and Students. This study will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. The expected result is an electronic system that will automatically detect phishing website and proffer solution to the end user, either by restricting access or proffer website blocking action.
CHAPTER ONE
1.1 Introduction
Phishing is a new type of network attack where the attacker creates a replica of an existing Web page to fool users (e.g., by using specially designed e-mails or instant messages) into submitting personal, financial, or password data to what they think is their service provides’ Web site. Phishing attack is a simplest way to obtain sensitive information from innocent users. The aim of the phishers is to acquire critical information like username, password and bank account details. Cyber security persons are now looking for trustworthy and steady detection techniques for phishing websites detection. Phishing becomes a main area of concern for security researchers because it is not difficult to create the fake website which looks so close to legitimate website. Experts can identify fake websites but not all the users can identify the fake website and such users become the victim of phishing attack. Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques.
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitations of the Study and Definition of technical terms.
1.2 Background of Study
Phishing may be a style of broad extortion that happens once a pernicious web site act sort of a real one memory that the last word objective to accumulate unstable info, as an example, passwords, account focal points, or MasterCard numbers. all the same, the means that there square measure some of contrary to phishing programming and techniques for recognizing potential phishing tries in messages and characteristic phishing substance on locales, phishes think about new and crossbreed procedures to bypass the open programming and frameworks. Phishing may be a fraud framework that uses a mixture of social designing what is additional, advancement to sensitive and personal data, as an example, passwords associate degree open-end credit unpretentious elements by presumptuous the highlights of a reliable individual or business in electronic correspondence. Phishing makes use of parody messages that square measure created to seem substantial and instructed to start out from true blue sources like money connected institutions, online business goals, e.t.c., to draw in customers to go to phony destinations through joins gave within the phishing email.
The general method to detect phishing websites by updating blacklisted URLs, Internet Protocol (IP) to the antivirus database which is also known as “blacklist" method. To evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques including: fast-flux, in which proxies are automatically generated to host the web-page; algorithmic generation of new URLs; etc. Major drawback of this method is that, it cannot detect zero-hour phishing attack.
Heuristic based detection which includes characteristics that are found to exist in phishing attacks in reality and can detect zero-hour phishing attack, but the characteristics are not guaranteed to always exist in such attacks and false positive rate in detection is very high (Mahmoud, 2013). To overcome the drawbacks of blacklist and heuristics based method, many security researchers now focused on machine learning techniques. Machine learning technology consists of a many algorithms which requires past data to make a decision or prediction on future data. Using this technique, algorithm will analyze various blacklisted and legitimate URLs and their features to accurately detect the phishing websites including zero- hour phishing websites.
Metrics accustomed live the visual similarity square measure layout similarity, block-level similarity, and overall vogue similarity. Webpage segmentation forms the bottom to outline these metrics. Salient blocks from the structure of a webpage and also the weighted average of the similarities between the paired blocks is understood as block-level similarity whereas the magnitude relation between the entire no of blocks and weighted variety of matched blocks is understood as layout similarity. The bar graph of the fashion feature helps in scheming the general style similarity i.e. The normalized correlation of the histograms of 2 web pages. The potential phishing pages square measure compared against the particular pages to assess the visual similarities between them within the metrics of the key region, overall vogue, and page layouts. The objective of this research to notice malicious websites, the internet sites square measure chiefly created to urge the info from the user. To notice this sort of web site may be a crucial job. During this paper to notice this sort of internet sites using machine learning and deep learning techniques by victimization this sort of methodologies detection of malicious websites is a simple task.
1.3 Statement of Problem
Investigation reveals the problem of the existing system which entails that; Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques. The general method to detect phishing websites by updating blacklisted URLs, Internet Protocol (IP) to the antivirus database which is also known as “blacklist" method.
1.4 Aim and Objectives of the Study
The aim of the study is to design and implement an online detection and prevention of phishing attack. In achieving this aim, the following specific objectives were laid out as follows to develop an application software that will:
- Provide information about the current website phishing threats and prevention measures
- Evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques
- Detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts
1.5 Significance of Study
The study will provide information about phishing attacks/threat towards website users which will be relevant to the Financial Institutions and Students. This study will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. This study contributes to knowledge and could serve as a guide for other study.
1.6 Scope of Study
The study focuses on the design and implementation of an online detection and prevention of phishing attack application software that will detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts.
1.7 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Research material: availability of research material is a major setback to the scope of the study.
- Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).
1.8 Definition of Terms
Automation: This is the use of automation equipment machines to do work that are previously done by people mainly.
Advent: This has to do with the arrival or approach of an important person, event.
Computer: This is an electronic device that accepts, process and sores the processed data as information that may be use for another operator.
Constraints: This is defined as a thing that limits or restricts an individual from processing.
Database: It is a large stores data held in a computer and accessible to a person e.g. individual same, address, sex etc.
Computer hardware: This are those physical peripheries that one can see touch in a computer system and also medical attach to the computer to examine patience body.
Computer software: These are program store in the computer by the manufactures. And more programs can also be stores by the manufactures. And more programs can also be store by the person that bought the computer to be specific task.
CHAPTER TWO
2.0 Literature Review
2.1 Introduction
The review of relevant literature is the main topic of this chapter. A literature review covers theoretical and methodological contributions to a certain issue in addition to the state of knowledge at the time of writing. It provides information about the state of the art in relation to the subject you are writing about. It examines the body of work on the chosen subject. The literature evaluation in this study comprises the …
Procedure for Downloading the PDF (Docx) Material
Design and Implementation of an Online Detection and Prevention of Phishing Attack can be downloaded by requesting the full set of materials at the project or seminar cost. The document will be sent via Microsoft Word (MS-Word) format via WhatsApp (e-mail) following payment confirmation.
| Seminar Material Cost ₦3,000 | Project Material Cost ₦5,000 |
Request Complete Material
 | Click here to request the Complete Material via WhatsApp including;
|
TABLE OF CONTENTSPRELIMINARY PAGES
- Title page
- Approval page
- Dedication
- Acknowledgement
- Table of Contents
- Abstract
INTRODUCTION
- 1.1 Introduction
- 1.2 Background of Study
- 1.3 Statement of Problem
- 1.4 Aim and Objectives of the Study
- 1.5 Significance of Study
- 1.6 Scope of Study
- 1.7 Limitations of the Study
- 1.8 Definition of Terms
LITERATURE REVIEW
- 2.1 Introduction
- 2.2 Conceptual Review of Phishing
- 2.2.1 Identification of Phishing Website
- 2.3 Theoretical Review
- 2.3.1 Historical Review of Website Phishing
- 2.3.2 Phishing Attack Procedure and Prevention
- 2.4 Overview of Machine Learning
- 2.5 Concept of System User Registration
- 2.5.1 Online System User Registration
- 2.5.2 Usage of Online Registration Forms
- 2.6 Website Web Portal
- 2.6.1 Types of Website Web Portals
- 2.7 Database for Web Portals
- 2.7.1 Merits of Integrating Databases in Web Applications
SYSTEM ANALYSIS AND DESIGN
- 3.1 Methodology Adopted
- 3.1.1 Problem Identification Using SSADM
- 3.2 Analysis of the Existing System
- 3.2.1 Dataflow of the Existing System
- 3.2.2 Disadvantages Of The Existing System
- 3.2.3 Weakness of the existing System
- 3.3 Analysis of the Proposed System
- 3.3.1 Data Flow Diagram of the Proposed System
- 3.3.2 Advantages of the Proposed System
- 3.3.3 Justification of the Proposed System
- 3.4 Functional Requirements
- 3.4.1 Use Case Diagram Of The Admin / User Privileges
- 3.5 Data Requirements
- 3.6 High Level Model of the Proposed System
SYSTEM DESIGN AND IMPLEMENTATION
- 4.1 Objectives of the Design
- 4.2 Cohesion and Decomposition High level Model
- 4.3 Control Center / Overall Dataflow Diagram
- 4.3.1 Proposed System Operation Flowchart
- 4.4 System Specification and Design
- 4.4.1 Input and Output Specification
- 4.4.2 Database Specification and Design
- 4.4.3 Data Dictionary
- 4.5 Choice and Justification of Programming Language
- 4.6 Program Documentation
- 4.7 Implementation Techniques
- 4.8 Programming Module Specification
- 4.8.1 Installation
- 4.8.2 Security Design Specification
- 4.8.3 System Architecture
- 4.9 Computer Hardware Minimum Requirement
- 4.10 Software Requirement
- 4.11 Personnel / User Training
SUMMARY, CONCLUSION AND RECOMMENDATION
- 5.1 Introduction
- 5.2 Summary
- 5.3 Conclusion
- 5.4 Recommendation
REFERENCES
APPENDIX A - “SOURCE CODE”
APPENDIX B - “OBJECT PROGRAM”
Disclaimer for Complete Material Utilization
The displayed research work titled "Design and Implementation of an Online Detection and Prevention of Phishing Attack" is stated as a research guideline towards accomplishing your assigned project / seminar research work. All the research materials on this website are ONLY for research purposes and should be used as a guideline in developing your research work. For no reason should you copy word for word as projectlist.com.ng will not be liable for any who copied the material. By ordering the complete research guideline, it signifies that you've accepted our terms of service.
PRELIMINARY PAGES
- Title page
- Approval page
- Dedication
- Acknowledgement
- Table of Contents
- Abstract
INTRODUCTION
- 1.1 Introduction
- 1.2 Background of Study
- 1.3 Statement of Problem
- 1.4 Aim and Objectives of the Study
- 1.5 Significance of Study
- 1.6 Scope of Study
- 1.7 Limitations of the Study
- 1.8 Definition of Terms
LITERATURE REVIEW
- 2.1 Introduction
- 2.2 Conceptual Review of Phishing
- 2.2.1 Identification of Phishing Website
- 2.3 Theoretical Review
- 2.3.1 Historical Review of Website Phishing
- 2.3.2 Phishing Attack Procedure and Prevention
- 2.4 Overview of Machine Learning
- 2.5 Concept of System User Registration
- 2.5.1 Online System User Registration
- 2.5.2 Usage of Online Registration Forms
- 2.6 Website Web Portal
- 2.6.1 Types of Website Web Portals
- 2.7 Database for Web Portals
- 2.7.1 Merits of Integrating Databases in Web Applications
SYSTEM ANALYSIS AND DESIGN
- 3.1 Methodology Adopted
- 3.1.1 Problem Identification Using SSADM
- 3.2 Analysis of the Existing System
- 3.2.1 Dataflow of the Existing System
- 3.2.2 Disadvantages Of The Existing System
- 3.2.3 Weakness of the existing System
- 3.3 Analysis of the Proposed System
- 3.3.1 Data Flow Diagram of the Proposed System
- 3.3.2 Advantages of the Proposed System
- 3.3.3 Justification of the Proposed System
- 3.4 Functional Requirements
- 3.4.1 Use Case Diagram Of The Admin / User Privileges
- 3.5 Data Requirements
- 3.6 High Level Model of the Proposed System
SYSTEM DESIGN AND IMPLEMENTATION
- 4.1 Objectives of the Design
- 4.2 Cohesion and Decomposition High level Model
- 4.3 Control Center / Overall Dataflow Diagram
- 4.3.1 Proposed System Operation Flowchart
- 4.4 System Specification and Design
- 4.4.1 Input and Output Specification
- 4.4.2 Database Specification and Design
- 4.4.3 Data Dictionary
- 4.5 Choice and Justification of Programming Language
- 4.6 Program Documentation
- 4.7 Implementation Techniques
- 4.8 Programming Module Specification
- 4.8.1 Installation
- 4.8.2 Security Design Specification
- 4.8.3 System Architecture
- 4.9 Computer Hardware Minimum Requirement
- 4.10 Software Requirement
- 4.11 Personnel / User Training
SUMMARY, CONCLUSION AND RECOMMENDATION
- 5.1 Introduction
- 5.2 Summary
- 5.3 Conclusion
- 5.4 Recommendation
REFERENCES
APPENDIX A - “SOURCE CODE”
APPENDIX B - “OBJECT PROGRAM”
Disclaimer for Complete Material Utilization
The displayed research work titled "Design and Implementation of an Online Detection and Prevention of Phishing Attack" is stated as a research guideline towards accomplishing your assigned project / seminar research work. All the research materials on this website are ONLY for research purposes and should be used as a guideline in developing your research work. For no reason should you copy word for word as projectlist.com.ng will not be liable for any who copied the material. By ordering the complete research guideline, it signifies that you've accepted our terms of service.
Frequently Asked Questions (FAQ)
Can the material for “Design and Implementation of a Computerized Cooperative Society System” be used as a guide for Computer Science (CS) Project?
Yes it can be used — A Computerized Cooperative Society is a system which accepts data and information presented to it in a prescribed from, carryout some operations on the input an supply the required results in a specified format as information. The aim of the study is Design and Implementation of a Computerized Cooperative Society System which focus the various ways by which the use of computer can be of great benefit to the cooperative societies. In achieving this aim, the following specific objectives were laid out as follows to design and develop an application software that will: provide adequate security on records of the union, reduce any attempt of misplacement of data, ease the problems of loan acquisition, make data validation easier and faster, …
Can the material for “Design and Implementation of Internet of Things (IOT) Based Health Monitoring System” be used as a guide for Computer Science (CS) Project?
Yes it can be used — The patient health monitoring is a very critical system, it can monitor physiological signals including electrocardiograph (ECG), Respiration Rate, Invasive and Non-Invasive Blood Pressure, Oxygen Saturation in Human Blood (SpO2), Body Temperature and other Gases. The aim of this project is to design an Internet of Things (IOT) Based Health Monitoring System. In achieving this aim, the following specific objectives were laid out as follows to develop an application software that will generate and manage bills of each patient using the internet, execute a proper recording of patients’ diagnosis and store patients data for a teaching hospital. The motivation that led to the implementation of the proposed system is that the existing system lacks immediate retrievals of health related documents …
Is the topic “Effect of Corporate Governance and External Auditor’s Report in Non-Financial Institution” recommended for Accountancy / Accounting Project?
Yes it is highly recommended — The research work tends to cover the relationship between corporate governance and external auditor’s report as it is important to non-financial institution. Improper accounting records, frauds and other internal factors are some of the factors that lead to lack of returns on investment in an organization. Hence, the broad objective of the study is to ascertain the relationship between auditing reporting and corporate governance and also to find out if auditing and corporate governance serve as a tool of control used by management to ensure achievement of organizational goals. The primary source of data collection was used where stratified questionnaires were distributed to respondents. The judgmental sampling technique was used to select a sample size of 100. The chi-square statistical …
Can the material for “Stage Management Practice in the Akwa Ibom State Council for Arts and Culture” be used as a guide for Performing Arts Project?
Yes it can be used — The study was carried out to examine the Stage Management Practice in the Akwa Ibom State Council for Arts and Culture. Investigation showed that the largest challenge facing a theatre organization producing live performances is stage management. This is because a production's capacity to manage the personal lives of its actors both on and off stage is critical to its overall success. The research design used in this report is descriptive design, utilizing questionnaire method to obtain information from the respondents for this project. Primary data were collected from the primary source which questionnaire was used as an instrument of data collection while secondary data were sources from textbooks, journals, newspapers and the internet were employed. The data were presented …
Can the material for “Impact of Local Government Administration on Poverty Alleviation” be used as a guide for Public Administration (PA) Project?
Yes it can be used — The study examines the Impact of Ikeja Local Government Administration on Poverty Alleviation in the sub-urban area called Ikeja in Lagos State of Nigeria. Poverty is a state where an individual is not able to cater adequate for his/her basic necessities such as food, clothing and shelter, is unable to meet social and economic objections, lack gainful employment, lack skill, lack assets and self − esteem and has limited access to social and economic infrastructures such as education, health, potable water, sanitation and consequently has limited chance of advancing his/her welfare to the limits of his/her capabilities. High majority of the population in Nigeria is living below the poverty line. The depth and severity of poverty is worse in the rural area …
Can the material for “Effects of Government Funding Schemes on Development of Small and Medium Enterprises (SMEs) in Nigeria” be used as a guide for Business Administration and Management (BAM) Project?
Yes it can be used — The study was conducted to investigate the effects of government funding schemes on development of Small and Medium Enterprises (SMEs) in Nigeria. To meet the objectives of the study, survey research method was applied and a sample of 50 respondents was administered to SMEs Owners and Staff in Ojo Local Government Area. Data collection was done through questionnaire administration and the data collected were statistically analyzed with the aid of SPSS software. It was found that government funding schemes significantly affects SMEs growth and development in Nigeria. However, only few entrepreneurs have access to the loans. Therefore, the study recommends that entrepreneurs need to be educated about the procedures and processes required to secure loans from the financial schemes available …
Can the material for “Problem of Personal Income Tax Collection in Anambra State” be used as a guide for Banking and Finance (BF) Project?
Yes it can be used — This study examined the factors militating against tax collection in Anambra state that lead to the fall of revenue in the state. This study also highlights the problems encountered by the staff of Board of internal Revenue − ie the organ entrusted by the government for collection of various taxes in the state. The sampling technique used for the research were simple data collection and analysis to locate the trend or behaviour of the trend or behavious of the data. Also employed were statistical tools for testing the hypothesis and chi square. In employing the chi-square techniques, the hypothesis to be tested will be stated as a null hypothesis and an alternative hypothesis. The instrument to research for the information oral interviews …
Can the material for “Effect of Sustainable Infrastructural Development on Economic Development of Telecommunication Sector in Nigeria” be used as a guide for Accountancy / Accounting Project?
Yes it can be used — In this research EFFECT OF SUSTAINABLE INFRASTRUCTURAL DEVELOPMENT ON ECONOMIC DEVELOPMENT OF TELECOMMUNICATION SECTOR IN NIGERIA work on the effect of sustainable infrastructural development on economic development of Nigeria. The researcher examined the effect of sustainable infrastructure on the gross domestic product (GDP) of Nigeria. The impact of infrastructural development on the Gross Fixed Capital Formation (GFCF) of Nigeria. Explore the impact that infrastructural development has on Nigeria’s economic growth. Data for the study was sourced through CBN Annual report and journal articles related to the subjects matter. The data collected was analyzed using SPSS. The results of the study shows that The results as presented in the coeficiente revealed that calculated t-statistics (t = -2.723) for parameter GDP is …
Can the material for “Fracture Mechanics Approach for the Maintenance of Offshore Oil and Gas Pipeline” be used as a guide for Science and Engineering Project?
Yes it can be used — Failure of offshore oil and gas pipelines occurs under certain conditions due to some applied mechanical forces. These conditions constitute a potential threat to the integrity of in-service life span of the pipelines which can lead to loss of resources and environmental pollution. Several studies have shown that pipelines fail as a result of Welding, Fatigue Crack Growth, Corrosion Fatigue, Stress Corrosion Cracking, and Erosion due to fluid flow. This paper presents a model by using fracture mechanics to analyze the allowable applied stresses an in service pipeline needs to withstand in minimizing crack growth. Furthermore, the crack size, crack shape and hole radius with pipe thickness will be modeled. The modeling results will be validated using experimental data. The implications …
Can the material for “An Assessment of the Impact of Industrialization on Economic Growth and Development in Nigeria (1981 - 2016)” be used as a guide for Economics Project?
Yes it can be used — The effect of industrial development on the economic growth of Nigeria has over the past decade been a recurring issue for analysis like every economy most especially developing economies. Nigeria has enjoyed a long period of sustained economic growth since 2001 and yet, there is poor contribution from the industrial sector to the country’s GDP. There are various studies that have supported that industrial development is a pathway to sustainable economic growth. Thus, this research investigated the effect of industrial development on the Nigeria’s economic growth. Taking 1981 to 2016 as a period of study. E-Views 7.0 version statistical package was used to analyze the secondary data that was collected from CBN statistical bulletin. GDP was used as the dependent variable, …