Do security toolbars actually prevent phishing attacks?

By Min Wu, Rob Miller, Simson L. Garfinkel. 2006

670 citations recorded by the source corpus.

Subfields: Information Systems, Signal Processing

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

In Signal Processing

Citations in the corpus

PhishEye: Live Monitoring of Sandboxed Phishing Kits (2016, background): “Our study presents accurate measurements of the duration and effectiveness of this popular threat, and discusses many new and interesting aspects we observed by monitoring hundreds of phishing campaigns.”
"...No one Can Hack My Mind": Comparing Expert and Non-Expert Security Practices (2015, neutral): “[54], and Egelman et al.”
Social Phishing (2018, background): “[23] conduct a study of three simulation anti-phishing toolbars to determine how effective they are at preventing users from visiting web sites that the tools have determined to be fraudulent.”
Crying Wolf: An Empirical Study of SSL Warning Effectiveness (2009, background): “In the summer of 2008 we conducted an online survey of Internet users from around the world to determine how they perceived the current web browser SSL warnings.”
Insights into User Behavior in Dealing with Internet Attacks (2012, neutral): “[60] evaluated the effectiveness of antiphishing toolbars.”
Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness (2013, background): “studied both interstitial and passive phishing warnings [35].”
A Framework for Reasoning About the Human in the Loop (2008, background): “But humans are often fooled by much simpler attacks and may even ignore the (usually correct) warnings provided by their security software [39].”
There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits (2008, background): “Several studies have pointed out the limitations of approaches that require human intervention [11, 27, 33].”
You've been warned: an empirical study of the effectiveness of web browser phishing warnings (2008, background): “Many users fail to notice the indicators, while others often do not trust them because they think the sites look trustworthy [23].”
So long, and no thanks for the externalities: the rational rejection of security advice by users (2009, background): “[53] find that users ignore the warnings provided by anti-phishing toolbars.”
An Anti-Phishing System Employing Diffused Information (2014, background): “Finally, some users input their credentials even when they receive warnings from the .lters [Wu et al. 2006].”
Who falls for phish?: a demographic analysis of phishing susceptibility and effectiveness of interventions (2010, background): “Second, many users do not understand or trust the security indicators in web browsers [31].”
Anti-Phishing Phil: the design and evaluation of a game that teaches people not to fall for phish (2007, background): “Even users who understand anti-phishing warnings may ignore them [36].”