× Close

📚 Departmental Topics and Materials for (2024) Google Researchers
Building Technology Topics
Business Management Topics
Computer Engineering Topics
Curriculum Studies Topics
Educational Management Topics
📚 Project or Seminar Related (2024) Scholaristic Topics for Students

Search for Project and Seminar Topics Post Advertisement Items for Promotion
Anonymous
Design and Implementation of an Online Detection and Prevention of Phishing Attack

Design and Implementation of an Online Detection and Prevention of Phishing Attack

Project / Seminar Material
Reference ID: PS-24894-TM

DEDICATION

This research work titled "Design and Implementation of an Online Detection and Prevention of Phishing Attack" is dedicated to God for his enabling grace and to all computer enthusiasts who help to make life a pleasant experience.

ACKNOWLEDGEMENT

I owe my indebtedness to my Supervisor (Name of your Supervisor), the Head of Department (Name of your HOD), the Lecturers in the department of Computer Science (CS), Book Authors and Profound Scholars of existing/related research material for your moral support that facilitated the successful completion of my (Tertiary Institution level). I am grateful to God Almighty and my parent for their financial support in my career. I really appreciate you all for everything, Thank you very much.


Design and Implementation of an Online Detection and Prevention of Phishing Attack

TABLE OF CONTENTS

PRELIMINARY PAGES


CHAPTER ONE

INTRODUCTION

  • 1.1 Introduction
  • 1.2 Background of Study
  • 1.3 Statement of Problem
  • 1.4 Aim and Objectives of the Study
  • 1.5 Significance of Study
  • 1.6 Scope of Study
  • 1.7 Limitations of the Study
  • 1.8 Definition of Terms

CHAPTER TWO

LITERATURE REVIEW

  • 2.1 Introduction
  • 2.2 Conceptual Review of Phishing
  • 2.2.1 Identification of Phishing Website
  • 2.3 Theoretical Review
  • 2.3.1 Historical Review of Website Phishing
  • 2.3.2 Phishing Attack Procedure and Prevention
  • 2.4 Overview of Machine Learning
  • 2.5 Concept of System User Registration
  • 2.5.1 Online System User Registration
  • 2.5.2 Usage of Online Registration Forms
  • 2.6 Website Web Portal
  • 2.6.1 Types of Website Web Portals
  • 2.7 Database for Web Portals
  • 2.7.1 Merits of Integrating Databases in Web Applications

CHAPTER THREE

SYSTEM ANALYSIS AND DESIGN

  • 3.1 Methodology Adopted
  • 3.1.1 Problem Identification Using SSADM
  • 3.2 Analysis of the Existing System
  • 3.2.1 Dataflow of the Existing System
  • 3.2.2 Disadvantages Of The Existing System
  • 3.2.3 Weakness of the existing System
  • 3.3 Analysis of the Proposed System
  • 3.3.1 Data Flow Diagram of the Proposed System
  • 3.3.2 Advantages of the Proposed System
  • 3.3.3 Justification of the Proposed System
  • 3.4 Functional Requirements
  • 3.4.1 Use Case Diagram Of The Admin / User Privileges
  • 3.5 Data Requirements
  • 3.6 High Level Model of the Proposed System

CHAPTER FOUR

SYSTEM DESIGN AND IMPLEMENTATION

  • 4.1 Objectives of the Design
  • 4.2 Cohesion and Decomposition High level Model
  • 4.3 Control Center / Overall Dataflow Diagram
  • 4.3.1 Proposed System Operation Flowchart
  • 4.4 System Specification and Design
  • 4.4.1 Input and Output Specification
  • 4.4.2 Database Specification and Design
  • 4.4.3 Data Dictionary
  • 4.5 Choice and Justification of Programming Language
  • 4.6 Program Documentation
  • 4.7 Implementation Techniques
  • 4.8 Programming Module Specification
  • 4.8.1 Installation
  • 4.8.2 Security Design Specification
  • 4.8.3 System Architecture
  • 4.9 Computer Hardware Minimum Requirement
  • 4.10 Software Requirement
  • 4.11 Personnel / User Training

CHAPTER FIVE

SUMMARY, CONCLUSION AND RECOMMENDATION

  • 5.1 Introduction
  • 5.2 Summary
  • 5.3 Conclusion
  • 5.4 Recommendation

REFERENCES

APPENDIX A - “SOURCE CODE”

APPENDIX B - “OBJECT PROGRAM”

ABSTRACT

Phishing attack is a simplest way to obtain sensitive information from innocent users. The aim of the phishers is to acquire critical information like username, password and bank account details. The aim of the study is to design and implement An Online Detection and Prevention of Phishing Attack. In achieving this aim, the following specific objectives were laid out to develop an application software that will provide information about the current website phishing threats and prevention measures, evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques and detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts. The motivation that led to this proposed system is that Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques. The methodology adopted in this study is the structured system analysis and design methodology (SSADM) which is a technical approach for analyzing and designing an application or system by applying object throughout the software development process. The programming language used is HTML, CSS, JAVASCRIPT, PHP, SQL and JQUERY. The reason why web programming languages was used is because, it is platform independent and it is a web based application. The study will provide information about phishing attacks/threat towards website users which will be relevant to the Financial Institutions and Students. This study will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. The expected result is an electronic system that will automatically detect phishing website and proffer solution to the end user, either by restricting access or proffer website blocking action.


Design and Implementation of an Online Detection and Prevention of Phishing Attack

CHAPTER ONE

1.1 Introduction

Phishing is a new type of network attack where the attacker creates a replica of an existing Web page to fool users (e.g., by using specially designed e-mails or instant messages) into submitting personal, financial, or password data to what they think is their service provides’ Web site. Phishing attack is a simplest way to obtain sensitive information from innocent users. The aim of the phishers is to acquire critical information like username, password and bank account details. Cyber security persons are now looking for trustworthy and steady detection techniques for phishing websites detection. Phishing becomes a main area of concern for security researchers because it is not difficult to create the fake website which looks so close to legitimate website. Experts can identify fake websites but not all the users can identify the fake website and such users become the victim of phishing attack. Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques.

As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitations of the Study and Definition of technical terms.


1.2 Background of Study

Phishing may be a style of broad extortion that happens once a pernicious web site act sort of a real one memory that the last word objective to accumulate unstable info, as an example, passwords, account focal points, or MasterCard numbers. all the same, the means that there square measure some of contrary to phishing programming and techniques for recognizing potential phishing tries in messages and characteristic phishing substance on locales, phishes think about new and crossbreed procedures to bypass the open programming and frameworks. Phishing may be a fraud framework that uses a mixture of social designing what is additional, advancement to sensitive and personal data, as an example, passwords associate degree open-end credit unpretentious elements by presumptuous the highlights of a reliable individual or business in electronic correspondence. Phishing makes use of parody messages that square measure created to seem substantial and instructed to start out from true blue sources like money connected institutions, online business goals, e.t.c., to draw in customers to go to phony destinations through joins gave within the phishing email.

The general method to detect phishing websites by updating blacklisted URLs, Internet Protocol (IP) to the antivirus database which is also known as “blacklist" method. To evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques including: fast-flux, in which proxies are automatically generated to host the web-page; algorithmic generation of new URLs; etc. Major drawback of this method is that, it cannot detect zero-hour phishing attack.

Heuristic based detection which includes characteristics that are found to exist in phishing attacks in reality and can detect zero-hour phishing attack, but the characteristics are not guaranteed to always exist in such attacks and false positive rate in detection is very high (Mahmoud, 2013). To overcome the drawbacks of blacklist and heuristics based method, many security researchers now focused on machine learning techniques. Machine learning technology consists of a many algorithms which requires past data to make a decision or prediction on future data. Using this technique, algorithm will analyze various blacklisted and legitimate URLs and their features to accurately detect the phishing websites including zero- hour phishing websites.

Metrics accustomed live the visual similarity square measure layout similarity, block-level similarity, and overall vogue similarity. Webpage segmentation forms the bottom to outline these metrics. Salient blocks from the structure of a webpage and also the weighted average of the similarities between the paired blocks is understood as block-level similarity whereas the magnitude relation between the entire no of blocks and weighted variety of matched blocks is understood as layout similarity. The bar graph of the fashion feature helps in scheming the general style similarity i.e. The normalized correlation of the histograms of 2 web pages. The potential phishing pages square measure compared against the particular pages to assess the visual similarities between them within the metrics of the key region, overall vogue, and page layouts. The objective of this research to notice malicious websites, the internet sites square measure chiefly created to urge the info from the user. To notice this sort of web site may be a crucial job. During this paper to notice this sort of internet sites using machine learning and deep learning techniques by victimization this sort of methodologies detection of malicious websites is a simple task.


1.3 Statement of Problem

Investigation reveals the problem of the existing system which entails that; Phishing attacks are becoming successful because lack of user awareness. Since phishing attack exploits the weaknesses found in users, it is very difficult to mitigate them but it is very important to enhance phishing detection techniques. The general method to detect phishing websites by updating blacklisted URLs, Internet Protocol (IP) to the antivirus database which is also known as “blacklist" method.


1.4 Aim and Objectives of the Study

The aim of the study is to design and implement an online detection and prevention of phishing attack. In achieving this aim, the following specific objectives were laid out as follows to develop an application software that will:

  1. Provide information about the current website phishing threats and prevention measures
  2. Evade blacklists attackers uses creative techniques to fool users by modifying the URL to appear legitimate via obfuscation and many other simple techniques
  3. Detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts

1.5 Significance of Study

The study will provide information about phishing attacks/threat towards website users which will be relevant to the Financial Institutions and Students. This study will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. This study contributes to knowledge and could serve as a guide for other study.


1.6 Scope of Study

The study focuses on the design and implementation of an online detection and prevention of phishing attack application software that will detect Uniform Resource Locator (URL) with phishing tools such as; website forms and email address prompts.


1.7 Limitations of the Study

During the course of this study, many things militated against its completion, some of which are:

  1. Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
  2. Research material: availability of research material is a major setback to the scope of the study.
  3. Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
  4. Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).

1.8 Definition of Terms

Automation: This is the use of automation equipment machines to do work that are previously done by people mainly.

Advent: This has to do with the arrival or approach of an important person, event.

Computer: This is an electronic device that accepts, process and sores the processed data as information that may be use for another operator.

Constraints: This is defined as a thing that limits or restricts an individual from processing.

Database: It is a large stores data held in a computer and accessible to a person e.g. individual same, address, sex etc.

Computer hardware: This are those physical peripheries that one can see touch in a computer system and also medical attach to the computer to examine patience body.

Computer software: These are program store in the computer by the manufactures. And more programs can also be stores by the manufactures. And more programs can also be store by the person that bought the computer to be specific task.

CHAPTER TWO

2.0 Literature Review

2.1 Introduction

This chapter focuses on the review of related literature. A literature review includes the current knowledge as well as theoretical and methodological contributions to a particular topic. It documents the state of the art with respect to the topic you are writing. It surveys the literature in the topic selected. In this research work the literature review includes the …

Summary Headlines for Design and Implementation of an Online Detection and Prevention of Phishing Attack