jsidrach / idn-homograph-attack

[Archived] Analysis of the potential impact of IDN Homograph Attacks

Іntеrnɑtⅰonɑlⅰzеⅾ Dоmɑⅰn Nɑmе Hоmоɡrɑρh Attɑсκ

Analysis of the potential impact of Internationalized Domain Name Homograph Attacks

Authors

• Chen Lai
• Zhongrong Jian
• J. Sidrach

Contents

• Documents
  • Proposal
  • Paper
  • Presentation
• Data
  • Confusable homoglyphs
  • Domains
    • Number of domains studied, date of data snapshots
    • Alexa Top 1m Websites
      • Alexa Top .com Websites - excluding IDNs
    • .com zone IDNs
      • .com zone IDNs Name Servers
    • IDN clusters
      • IDN clusters statistics
      • IDN clusters with basic WHOIS information
    • Manually classified homograph IDNs
      • Manually classified homograph IDNs statistics
    • Clustered registrants with more than one homograph IDN
• Source Code
  • Initial raw data filtering
  • Clustering of homograph IDNs
    • Homographs detection library
    • Homoglyphs dictionary generator
    • Homoglyphs dictionary
  • Retrieval of IDNs WHOIS information
  • Clustering of registrants with more than one homograph IDN

Commands

• Generate PDFs
  • Requirements: xelatex, bibtex
  • Run make all inside the docs/ folder
• Process data
  • Requirements: .com zone snapshot (named data/com-zone-20170501.gz), whois, golang, src/ directory included in golang's $GOPATH
  • make confusables generates confusables map
  • make filter filters the raw data
  • make cluster clusters homograph IDNs
  • make whois retrieves homograph IDNs WHOIS information
  • make registrants clusters registrants with more than one homograph IDN

Acknowledgements

• Louis DeKoven and Stefan Savage and for their help and guidance

References

• Unicode Confusable Detection
• Unicode Confusables Library