International Conference on Computer and Knowledge Engineering

Home / 15th International Conference on Computer and Knowledge Engineering

Multi-Layered Defense Against Modern Phishing: A Dual-Sandbox and CDR Approach

Authors :

Mahdi Seyfipoor¹ Mohammad Mahdi Eskandari²

1- School of Electrical and Computer Engineering, University of Tehran, Tehran, Iran 2- Computer Engineering, University of Tehran, Tehran, Iran

Keywords :

phishing،cybersecurity،sandbox،content disarm and reconstruction،Office document

Abstract :

Phishing attacks are a form of social engineering. They exploit human behavior to gain initial access to an organization. In this paper, we examine two common attack vectors: phishing websites and Office documents (e.g., Word and Excel), which are widely used in organizations. To counter these attacks, this paper proposes a dual sandbox architecture. It uses the Virtual Network Computing (VNC) protocol for websites and the Remote Desktop Protocol (RDP) for Office documents. Another approach is content disarm and reconstruction (CDR) for Office documents. This method parses different file types and eliminates potential threats. The CDR-enhanced sandbox performed strongly on Office, achieving 98.14% Recall and a False Positive Rate (FPR) of 0.5%. The website sandbox also achieved 94% Recall and an FPR of 6%, which is due to strict input validation, filtering of user inputs, and restrictions on files downloaded from the Internet. These findings confirm the defensive capabilities of architecture.

Papers List

List of archived papers

The Effect of Network Environment on Traffic Classification

Abolghasem Rezaei Khesal - Mehdi Teimouri

Pyramid Transformer for Traffic Sign Detection

Omid Nejati manzari - Amin Boudesh - Shahriar B. Shokouhi

Islamic Geometric algorithms: A survey

Elham Akbari - Azam Bastanfard

TrackMine: Topic Tracking in Model Mining using Genetic Algorithm

Mohammad Sajad Kasaei - Mohammadreza Sharbaf - Afsaneh Fatemi - Bahman Zamani

Bridging the Synthetic-to-Real Gap (BSRG): Creating Simulated Datasets for Domain Adaptation to Enhance Vehicle Detection

Behnaz Sadeghigol - Mohammad Ali Keyvanrad

AgeNet-AT: An End-to-End Model for Robust Joint Speaker Age Estimation and Gender Recognition Based on Attention Mechanism and Titanet

Mahsa Zamani Tarashandeh - Amirhossein Torkanloo - Mohammad Hossein Moattar

Autonomous Drone Navigation Using Synchronized Camera and IMU Data with CNN

Reza Javanmard Alitappeh - Narges Hamzeh Mermeti - Fatemeh Barzegar - Fatemeh Ebrahimi - Nima Mahmoudi - Jalal Alipour Langouri

LightFedSelect: A Lightweight Framework for Byzantine-Robust Federated Learning

Seyed Saeed Razavi - Seyed Arsalan Vasegh Rahim Parvar - Soroosh Dadashi Pakdeh - Mohammad Matin Rezaeifard - Morteza Mollaie Chafi - Reza Ebrahimi Atani

An Automated Visual Defect Segmentation for Flat Steel Surface Using Deep Neural Networks

Dorna Nourbakhsh Sabet - Mohammad Reza Zarifi - Javad Khoramdel - Yasamin Borhani - Esmaeil Najafi

A Smart Electrochemical Biosensor for Arsenic Detection in Water

Keyvan Asefpour Vakilian