Secure Visualization of Authentication Information: A Case Study

The open nature of the Web makes it possible to create spoofed Web pages which, to the casual observer, are indistinguishable from authentic pages. The defense against Web spoofing attacks is a challenging problem since most users are unwilling (or unable) to follow complex interactive authentication procedures (e.g., inspect a Web server certificate). In this paper, we present a visual scheme that protects users against Web spoofing attacks while requiring minimal interaction.