RE: Unicode and Security: Domain Names

From: Nelson H. F. Beebe (beebe@math.utah.edu)
Date: Fri Feb 08 2002 - 15:15:28 EST


The recent discussions of this list about Internet domain name
spoofing through substitution of Unicode characters that have similar,
or identical, glyphs is an issue that has recently appeared in print
in a prominent journal:

@String{j-CACM = "Communications of the ACM"}

@Article{Gabrilovich:2002:IRH,
  author = "Evgeniy Gabrilovich and Alex Gontmakher",
  title = "Inside risks: The homograph attack",
  journal = j-CACM,
  volume = "45",
  number = "2",
  pages = "128--128",
  month = feb,
  year = "2002",
  CODEN = "CACMA2",
  ISSN = "0001-0782",
  bibdate = "Wed Jan 30 17:45:01 MST 2002",
  bibsource = "http://www.acm.org/pubs/contents/journals/cacm/",
  acknowledgement = ack-nhfb,
}

Bruce Schneier also discussed this in the 15-Mar-2001, 15-Jul-2001,
15-Sep-2001, and 15-Nov-2001 issues of the CRYPTO-GRAM newsletter
(available at

        http://www.counterpane.com/crypto-gram.html

) and gave these links for more info:

        http://www.theregister.co.uk/content/55/21573.html
        http://www.securityfocus.com/bid/3461
        http://www.counterpane.com/crypto-gram-0007.html#9
        http://www.securityfocus.com/focus/ids/articles/utf8.html

-------------------------------------------------------------------------------
- Nelson H. F. Beebe Tel: +1 801 581 5254 -
- Center for Scientific Computing FAX: +1 801 585 1640, +1 801 581 4148 -
- University of Utah Internet e-mail: beebe@math.utah.edu -
- Department of Mathematics, 322 INSCC beebe@acm.org beebe@computer.org -
- 155 S 1400 E RM 233 beebe@ieee.org -
- Salt Lake City, UT 84112-0090, USA URL: http://www.math.utah.edu/~beebe -
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.2 : Fri Feb 08 2002 - 14:44:18 EST