The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. ex. Some numerals are expressed as "XNUMX".
Copyrights notice
The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. Copyrights notice
Les noms de domaine internationalisés (IDN) sont utilisés à mauvais escient pour créer des noms de domaine visuellement similaires à ceux de marques légitimes/populaires. Dans ce travail, nous systématisons ces noms de domaine, que nous appelons IDN trompeurs, et analysons les risques qui y sont associés. En particulier, nous proposons un nouveau système appelé DomainScouter pour détecter divers IDN trompeurs et calculer un score IDN trompeur, une nouvelle métrique indiquant le nombre d'utilisateurs susceptibles d'être induits en erreur par un IDN trompeur. Nous effectuons une étude de mesure complète sur les IDN trompeurs identifiés en utilisant plus de 4.4 millions d'IDN enregistrés sous 570 domaines de premier niveau (TLD). Les résultats des mesures démontrent qu’il existe de nombreux IDN trompeurs jusqu’alors inexplorés ciblant des marques non anglophones ou combinant d’autres méthodes de squattage de domaine. En outre, nous menons des enquêtes en ligne pour examiner et mettre en évidence les vulnérabilités dans la perception des utilisateurs lorsqu'ils rencontrent de tels IDN. Enfin, nous discutons des contre-mesures pratiques que les parties prenantes peuvent prendre contre les IDN trompeurs.
Daiki CHIBA
NTT Secure Platform Laboratories
Ayako AKIYAMA HASEGAWA
NTT Secure Platform Laboratories
Takashi KOIDE
NTT Secure Platform Laboratories
Yuta SAWABE
Waseda University
Shigeki GOTO
Waseda University
Mitsuaki AKIYAMA
NTT Secure Platform Laboratories
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Copier
Daiki CHIBA, Ayako AKIYAMA HASEGAWA, Takashi KOIDE, Yuta SAWABE, Shigeki GOTO, Mitsuaki AKIYAMA, "DomainScouter: Analyzing the Risks of Deceptive Internationalized Domain Names" in IEICE TRANSACTIONS on Information,
vol. E103-D, no. 7, pp. 1493-1511, July 2020, doi: 10.1587/transinf.2019ICP0002.
Abstract: Internationalized domain names (IDNs) are abused to create domain names that are visually similar to those of legitimate/popular brands. In this work, we systematize such domain names, which we call deceptive IDNs, and analyze the risks associated with them. In particular, we propose a new system called DomainScouter to detect various deceptive IDNs and calculate a deceptive IDN score, a new metric indicating the number of users that are likely to be misled by a deceptive IDN. We perform a comprehensive measurement study on the identified deceptive IDNs using over 4.4 million registered IDNs under 570 top-level domains (TLDs). The measurement results demonstrate that there are many previously unexplored deceptive IDNs targeting non-English brands or combining other domain squatting methods. Furthermore, we conduct online surveys to examine and highlight vulnerabilities in user perceptions when encountering such IDNs. Finally, we discuss the practical countermeasures that stakeholders can take against deceptive IDNs.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2019ICP0002/_p
Copier
@ARTICLE{e103-d_7_1493,
author={Daiki CHIBA, Ayako AKIYAMA HASEGAWA, Takashi KOIDE, Yuta SAWABE, Shigeki GOTO, Mitsuaki AKIYAMA, },
journal={IEICE TRANSACTIONS on Information},
title={DomainScouter: Analyzing the Risks of Deceptive Internationalized Domain Names},
year={2020},
volume={E103-D},
number={7},
pages={1493-1511},
abstract={Internationalized domain names (IDNs) are abused to create domain names that are visually similar to those of legitimate/popular brands. In this work, we systematize such domain names, which we call deceptive IDNs, and analyze the risks associated with them. In particular, we propose a new system called DomainScouter to detect various deceptive IDNs and calculate a deceptive IDN score, a new metric indicating the number of users that are likely to be misled by a deceptive IDN. We perform a comprehensive measurement study on the identified deceptive IDNs using over 4.4 million registered IDNs under 570 top-level domains (TLDs). The measurement results demonstrate that there are many previously unexplored deceptive IDNs targeting non-English brands or combining other domain squatting methods. Furthermore, we conduct online surveys to examine and highlight vulnerabilities in user perceptions when encountering such IDNs. Finally, we discuss the practical countermeasures that stakeholders can take against deceptive IDNs.},
keywords={},
doi={10.1587/transinf.2019ICP0002},
ISSN={1745-1361},
month={July},}
Copier
TY - JOUR
TI - DomainScouter: Analyzing the Risks of Deceptive Internationalized Domain Names
T2 - IEICE TRANSACTIONS on Information
SP - 1493
EP - 1511
AU - Daiki CHIBA
AU - Ayako AKIYAMA HASEGAWA
AU - Takashi KOIDE
AU - Yuta SAWABE
AU - Shigeki GOTO
AU - Mitsuaki AKIYAMA
PY - 2020
DO - 10.1587/transinf.2019ICP0002
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E103-D
IS - 7
JA - IEICE TRANSACTIONS on Information
Y1 - July 2020
AB - Internationalized domain names (IDNs) are abused to create domain names that are visually similar to those of legitimate/popular brands. In this work, we systematize such domain names, which we call deceptive IDNs, and analyze the risks associated with them. In particular, we propose a new system called DomainScouter to detect various deceptive IDNs and calculate a deceptive IDN score, a new metric indicating the number of users that are likely to be misled by a deceptive IDN. We perform a comprehensive measurement study on the identified deceptive IDNs using over 4.4 million registered IDNs under 570 top-level domains (TLDs). The measurement results demonstrate that there are many previously unexplored deceptive IDNs targeting non-English brands or combining other domain squatting methods. Furthermore, we conduct online surveys to examine and highlight vulnerabilities in user perceptions when encountering such IDNs. Finally, we discuss the practical countermeasures that stakeholders can take against deceptive IDNs.
ER -