Anti-phishing software

Anti-phishing software consists of computer programs that attempt to identify phishing content contained in websites and e-mail or block users from being tricked. It is often integrated with web browsers and email clients as a toolbar that displays the real domain name for the website the viewer is visiting, in an attempt to prevent fraudulent websites from masquerading as other legitimate web sites.

Most popular web browsers comes with built-in anti-phishing and anti-malware protection services, but almost none of the alternate web browsers have such protections.

Password managers can also be used to help defend against phishing, as can some Mutual authentication techniques.

A study conducted by 3Sharp released on September 27, 2006 tested the ability of eight anti-phishing solutions to block known phishing sites, warn about phishing sites, and allow good sites. The study, which was commissioned by Microsoft and titled "Gone Phishing: Evaluating Anti-Phishing Tools for Windows", concluded that Internet Explorer and Netcraft Toolbar were the most effective anti-phishing tools.

A later independent study, conducted by Carnegie Mellon University CyLab titled "Phinding Phish: An Evaluation of Anti-Phishing Toolbars", released November 13, 2006, tested the ability of ten anti-phishing solutions to block known or warn about phishing sites, not block or warn about legitimate sites, as well as usability testing of each solution. Of the solutions tested, Netcraft Toolbar, EarthLink ScamBlocker and SpoofGuard were able to correctly identify over 75% of the sites tested, with Netcraft Toolbar receiving the highest score, without incorrectly identifying legitimate sites as phishing. Severe problems were however discovered using SpoofGuard, and it incorrectly identified 38% of the tested legitimate sites as phishing, leading to the conclusion that "It would seem that such inaccuracies might nullify the benefits SpoofGuard offers in identifying phishing sites.". Google Safe Browsing (which has since been built into Firefox) and Internet Explorer both performed well, but when testing ability to detect fresh phishes Netcraft Toolbar scored as high 96%, while Google Safe Browsing scored as low as 0%, possibly due to technical problems with Google Safe Browsing. The testing was performed using phishing data obtained from Anti-Phishing Working Group, PhishTank and an unnamed email filtering vendor.

...
Wikipedia