Phishing in Internet Security: History, Risks & Prevention
This paper examines phishing as a persistent internet security threat, tracing its origins from early America Online scams in the mid-1990s to increasingly sophisticated modern cyberattacks. The paper explains how phishing works — through deceptive emails, fake websites, malware, and social media lures — and documents the sharp rise in attack frequency between 2010 and 2012. It also outlines practical countermeasures individuals and organizations can employ, including verifying URLs, using HTTPS-secured sites, avoiding suspicious email attachments, and confirming communications directly with financial institutions before submitting any personal information.
- Introduction to Phishing: Defines phishing and common online security threats
- History of Phishing: Origins of phishing from AOL to payment systems
- Results and Impact of Phishing Attacks: Rising attack statistics and organized cybercrime
- How to Avoid Phishing: Practical strategies to detect and prevent phishing
- Conclusion: Call for stronger individual and organizational security
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- The paper moves logically from definition and historical context to documented impact and then actionable prevention advice, giving readers a complete picture of the threat.
- It grounds abstract security concepts in concrete examples — the AOL phishing case, the 2001 E-gold attack, and PayPal domain spoofing — making the discussion accessible to general readers.
- Statistical evidence (attack counts from 2010–2012) is used to demonstrate the escalating scale of the problem, adding empirical weight to the argument.
Key academic technique demonstrated
The paper effectively uses a problem–evidence–solution structure: it establishes what phishing is, supports the claim that it is worsening with cited statistics, and then provides a systematic set of user-level countermeasures. This pattern is a reliable framework for applied security and technology essays at the undergraduate level.
Structure breakdown
The paper contains five sections. The introduction defines phishing and its social context. The history section traces the term's coinage and early attacks. The results section documents escalating attack numbers and the shift toward organized cybercrime. The prevention section offers specific, practical detection and avoidance strategies. The conclusion synthesizes the threat landscape and calls for stronger protective measures at both individual and organizational levels.
Introduction to Phishing
The number of people browsing the internet across the world is increasing with each passing day. There are numerous new internet users daily, and many of these users are unaware of the challenges and security risks the internet presents. Any online user is vulnerable to numerous security threats such as viruses, worms, Trojan horses, hackers, phishing, and pharming. All of these are well-documented risks that continue to evolve. The viruses users encountered in the past are very different from those circulating today. Scammers have developed a variety of methods to gain access to sensitive user information, primarily targeting financial, banking, credit card, and personal data.
Phishing is a method of obtaining personal information from a user by masquerading as a trustworthy entity (Marforio, Masti, Soriente, Kostiainen, & Capkun, 2015). This is typically accomplished by forging or faking an entity — such as a bank or credit card processing company — that collects personal or sensitive information. Scammers send a person an email informing them that they need to update their account, or that their online account has been compromised and they need to act quickly. The email contains a link to a fake website that closely resembles the genuine one. When the user enters their information, the scammer gains access to it and can defraud the victim, steal their identity, or make online purchases using the user's credentials.
References
Goodman, J. T., Rehfuss, P. S., Rounthwaite, R. L., Mishra, M., Hulten, G. J., Richards, K. G., . . . Deyo, R. C. (2012). Phishing detection, prevention, and notification. Google Patents.
Hong, J. (2012). The state of phishing attacks. Communications of the ACM, 55(1), 74–81.
Levin, R., Richardson, J., Warner, G., & Kerley, K. (2012). Explaining cybercrime through the lens of differential association theory, Hadidi44-2.php PayPal case study. Paper presented at the eCrime Researchers Summit (eCrime), 2012.
Marforio, C., Masti, R. J., Soriente, C., Kostiainen, K., & Capkun, S. (2015). Personalized security indicators to detect application phishing attacks in mobile platforms. arXiv preprint arXiv:1502.06824.
Rader, M. A., & Rahman, S. S. M. (2013). Exploring historical and emerging phishing techniques and mitigating the associated security risks. International Journal of Network Security & Its Applications, 5(4).
Create your account
Always verify citation format against your institution’s current style guide requirements.