Chapter 7 - So long, and thanks for all the phish!

Abstract

This chapter covers some antiphishing products on the market, including some slight analyses of them. The battle against phishing is not always a losing battle. It just requires a bit of thinking out of the box. The threat model is changing rapidly, and from the point of the view of a security professional, defenses are not that much scalable compared to those of the attackers. This happens because of multiple conditions, including the law, technology, liability, and skill sets. It discusses that security vendors need to get smart and stop screwing their own customers because they like to make money. Toolbars are pointless to the customer who does not know about phishing, so it is advised that vendors focus more on transparently protecting customers. In fine, the chapter presents a few frequently asked questions with their answers, such as the answer to a question as to what is the e-mail address users can use to send the author fishing e-mails gives the e-mail address, which is: endmephish@securescience.net