MP-shield: A framework for phishing detection in mobile devices

Today, there is an exponential growth of e-services requiring the exchange of personal and sensible data over the Internet. Phishing techniques are emerging as the easiest solution to break the weakest link of the security chain: the end user. Social engineering attacks are deployed by financial/cyber criminals at a very low cost to induce naïve Internet users to reveal user credentials such as bank account and credit card numbers. This problem needs to be addressed in the mobile field as well, due to the large diffusion of mobile devices such as smartphones, tablet, etc. In this paper we propose a novel framework for phishing detection in Android mobile devices which, on the one hand exploits well-known techniques already implemented by popular web browsers plug-in, such as public blacklist search, and, on the other hand, implements a machine learning detection engine which ensure zero-hour protection from new phishing campaigns.