[转载]Current Anti-Phishing Solutions and Yahoo's Sign-in Seal

文章作者：Naveen Agarwal, Scott Renfro, and Arturo Bejar
原始出处：http://seclab.cs.rice.edu/w2sp/2007/

本文章是Web 2.0 Security & Privacy 2007大会议题。

Abstract
We examine Yahoo!’s Sign-in Seal and some of the considerations that affected the design. Unlike solutions like SiteKey which are tied to a user’s account, Yahoo!’s sign-in Seal is tied to a browser. We have found “Rusty’s Axioms” to be useful for analyzing the security of both anti-phishing solutions and also other user interaction with our site.