Angler: Phishing Prevention and Defense Framework

Criminal organizations, self-interested individuals, and many foreign militaries employ email-based attacks, referred to as phishing attacks, to deceive individuals into unwittingly divulging private, personal, sensitive, or proprietary information. One of the primary weaknesses in today"s anti-phishing technology is its reliance on server-side protection mechanisms. Because a phishing email containing a malicious document or link can be made to appear identical to a valid source, relying solely on catching phishing attacks at the server boundary is inadequate. Instead, Pikewerks proposes the multi-tiered Angler, a three-stage, automated system for preventing and protecting against phishing and spear phishing attacks across a much broader spectrum of user/email interaction.