About: IDN homograph attack

Facets (new session)
Description
Metadata
Settings
- Rule:
- Inverse Functional Properties:
- "Same As":

About: IDN homograph attack Goto Sponge NotDistinct Permalink

An Entity of Type : yago:YagoPermanentlyLocatedEntity, within Data Space : dbpedia.org associated with source document(s)
QRcode icon

http://dbpedia.org/describe/?url=http%3A%2F%2Fdbpedia.org%2Fresource%2FIDN_homograph_attack

The internationalized domain name (IDN) homograph attack is a way a malicious party may deceive computer users about what remote system they are communicating with, by exploiting the fact that many different characters look alike (i.e., they are homographs, hence the term for the attack, although technically homoglyph is the more accurate term for different characters that look alike). For example, a regular user of example.com may be lured to click a link where the Latin character "a" is replaced with the Cyrillic character "а".

Attributes	Values
rdf:type	yago:WikicatWebSecurityExploits yago:Abstraction100002137 yago:Accomplishment100035189 yago:Act100030358 yago:Action100037396 yago:Event100029378 yago:Feat100036762 yago:PsychologicalFeature100023100 yago:YagoPermanentlyLocatedEntity
rdfs:label	Homografový útok (cs) Homographischer Angriff (de) Serangan homograf alamat domain internasional (in) IDN homograph attack (en) Attacco omografico (it) ホモグラフ攻撃 (ja) IDN欺騙 (zh)
rdfs:comment	ホモグラフ攻撃（ホモグラフこうげき、英語: homograph attack）は、URLのホスト名の文字として、真正なサイトに酷似した、異なる文字（ = 見た目の形が紛らわしい文字）を用いて偽装し、偽のサイトに誘導するスプーフィング攻撃の一種で、同形異字語攻撃ともいう。国際化ドメイン名を使用したホモグラフ攻撃はIDNホモグラフ攻撃 (あいでぃーえぬほもぐらふこうげき)と呼ぶと呼ばれる。ホスト名（ドメイン名）に使用できる文字は、原則としてASCIIコード内のアルファベット・数字（A - Z、0 - 9）とハイフン(-)、ドット(.)だけであるが、国際化ドメイン名ではUnicodeほかの非ASCII文字をPunycodeによりエンコードして利用できる一方、ブラウザなどのユーザにとってはエンコードされた文字列は通常マスクされ、国際化ドメイン名の表記でそのまま利用できる。この場合において、例えば ASCII文字 "C" に対し、ギリシア文字、（非ASCIIの）ラテン文字、キリル文字など、それぞれにおいて字体が異なる酷似した文字コードに割り当てられており、IDNホモグラフ攻撃は、アルファベットの大文字・小文字、全角・半角の文字記号など、これらの「見た目の形が紛らわしい文字」を用い、偽サイトのURLに割り当てることで人間の目を欺いて悪用する。 (ja) IDN欺騙是钓鱼式攻击的手法之一。它利用國際化網域名稱（IDN）可以以Unicode字元命名網址的特性，透過同形異義字，魚目混珠。 (zh) Homografový útok je označení pro počítačový útok, který využívá vnější podobnost různých znaků či slov, tedy existenci povolených homoglyfů (byť vžitý název útoku odkazuje k homografům) v jménech internetových domén. Uživateli je tedy útočníkem podstrčen hypertextový odkaz, který zdánlivě vede na doménu, kterou uživatel považuje za bezpečnou a bude na ní bez obav komunikovat včetně důvěrných údajů (například na ní zadá své heslo), ale ve skutečnosti se jedná o doménu v moci útočníka, který tak ony důvěrné údaje zjistí. (cs) Homographischer bzw. homografischer Angriff (oder homographisches bzw. homografisches Phishing) ist eine Methode des Spoofing, bei der der Angreifer das ähnliche Aussehen verschiedener Schriftzeichen dazu benutzt, Computernutzern eine falsche Identität vorzutäuschen, insbesondere bei Domains. Der Angreifer lockt den Nutzer zu einem Domainnamen, der fast genauso aussieht wie ein bekannter Domainname, aber woanders hin führt, zum Beispiel zu einer Phishing-Website. (de) The internationalized domain name (IDN) homograph attack is a way a malicious party may deceive computer users about what remote system they are communicating with, by exploiting the fact that many different characters look alike (i.e., they are homographs, hence the term for the attack, although technically homoglyph is the more accurate term for different characters that look alike). For example, a regular user of example.com may be lured to click a link where the Latin character "a" is replaced with the Cyrillic character "а". (en) L'attacco omografico al nome di dominio internazionalizzato è una tipologia di attacco informatico in cui un utente malintenzionato può ingannare gli utenti di un computer riguardo al sistema remoto con il quale stanno comunicando, sfruttando il fatto che molti caratteri tipografici si assomigliano (ad esempio, sono omografi, da qui il nome dell'attacco). Per esempio, un utente abituale di esempio.com può essere indotto a fare clic su un link in cui il carattere dell'alfabeto latino "A" viene sostituito con il carattere "A" dell'alfabeto cirillico. (it)
foaf:depiction
dcterms:subject	Nonstandard spelling Unicode Internationalized domain names Deception Obfuscation Web security exploits Orthography
Wikipage page ID	1609031 (xsd:integer)
Wikipage revision ID	1120661360 (xsd:integer)
Link from a Wikipage to another Wikipage	Capital letter 6 (number) Q Roman numeral Enclosed CJK Letters and Months Hacker (computer security) Blackletter Nonstandard spelling Unicode Homoglyph PayPal Currency Symbols (Unicode block) UTF-8 Vehicle registration plate А Б Т Ԁ Duplicate characters in Unicode Internet Number Forms PayPaI .biz .ca .com .hk .org .ελ .бг .мон .рф .срб .укр Internationalized domain names S Safari (web browser) Nu (letter) Punycode Deception Chromium (web browser) Code page 437 G GTLD Google Chrome Grave accent Greece Sigma Mozilla Firefox Multilingual N Coordination Center for TLD RU M MacOS Machine learning Simplified Chinese characters Slashdot Slashed zero Computer operator Zero-width space Ä Ë Ï Ö ß Phishing Spoofing attack

Faceted Search & Find service v1.17_git139 as of Feb 29 2024

Alternative Linked Data Documents: ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 08.03.3330 as of Mar 19 2024, on Linux (x86_64-generic-linux-glibc212), Single-Server Edition (61 GB total memory, 51 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software