Detection technology of phishing

Phishing is a form of online identity theft. Phishers use social engineering to steal victims´ personal identity data and financial account credentials. Social engineering schemes use spoofed e-mails to lure unsuspecting victims into counterfeit websites designed to trick recipients into divulging financial data such as credit card numbers, account usernames, passwords and social security numbers. In this paper, a thorough overview of a phishing attack and detection techniques is presented. Firstly, technologies used by phishers and the definition, classification and future works of deceptive phishing attacks are discussed. Following with the existing detection techniques in literatures and research-stage technologies are shown, and a thorough analysis that shortcomings of countermeasures is given.