An Introspective Behavior Based Methodology to Mitigate E-Mail Based Threats

Total Page:16

File Type:pdf, Size:1020Kb

An Introspective Behavior Based Methodology to Mitigate E-Mail Based Threats AN INTROSPECTIVE BEHAVIOR BASED METHODOLOGY TO MITIGATE E-MAIL BASED THREATS BY MADHUSUDHANAN CHANDRASEKARAN THESIS Submitted in partial fulfillment of the requirements for the degree of Doctor of Philosophy in Computer Science and Engineering in the Graduate School of the State University of New York at Buffalo, 2009 Buffalo, New York © Copyright by Madhusudhanan Chandrasekaran, 2009 All Rights Reserved To my family. iii Abstract E-mail is touted as the backbone of present day communication. Despite its convenience and im- portance, existing e-mail infrastructure is not devoid of problems. The underlying e-mail protocols operate on the assumption that users would not abuse the privilege of sending messages to each other. This weakness in design is consistently taken advantage by attackers to carry out social engineering and security exploits on day-to-day e-mail users. As a result, three prominent e-mail based threats have surfaced, viz. (i) spam; (ii) phishing; and (iii) information leak. While spam e-mail classification has received a lot of attention in the recent years, the other two threats still loom at large. The main goal of this dissertation is to design and develop efficient behavior based classification techniques that help to address each of these threats in a piecemeal fashion. The first part of this dissertation attempts to tackle the problem of detecting phishing e-mails before they reach users’ inboxes. To begin with, shortcomings of existing spam filters toward clas- sifying phishing e-mails are highlighted. To overcome them, a customizable and usable spam filter (CUSP) that detects phishing e-mails from the absence of personalized user information contained in them is proposed. However, as solely relying on the presence of personalized information as the criteria to detect phishing e-mails is not entirely foolproof, a novel machine learning based classi- fier that separates phishing e-mails based on their underlying semantic behavior is proposed. Ex- perimentation on real word phishing and financial e-mail datasets demonstrates that the proposed methodology can detect phishing e-mails with over 90% accuracy while keeping false positive rate minimum. Also, feasibility of generating context-sensitive warnings that better educate the users about the ill-effects of phishing attacks is explored. Classification techniques that operate on features confined to the phishing e-mails’ body can be iv thwarted using simple obfuscation techniques, which substitute spurious content appearing in them with seemingly innocuous characters or images. To address such scenarios, the second part of this dissertation takes the classification process a step further to analyze the behavior and characteris- tics of Websites referred by URLs contained in e-mails. Specifically, a challenge-response based technique called PHONEY is proposed to detect phishing Websites based on their inability to dis- tinguish fake and genuine inputs apart. Experimental results based on evaluation on both “live” and “synthesized” phishing Websites reveal that PHONEY can detect almost of all the e-mails that link to live phishing Websites with zero false positives and minimal computation overhead. In a similar vein, this dissertation proposes a novel technique to identify spam e-mails by analyzing the content of the linked-to Websites. A combination of textual and structural features extracted from the linked-to Websites is supplied as input to five machine learning algorithms employed for the purpose of classification. Testing on live spam feeds reveal that the proposed technique can detect spam e-mails with over 95% detection rate, thereby exhibiting better performance than two popular open source anti-spam filters. Information leaks pose significant risk to users’ privacy. An information leak could reveal users’ browsing characteristics or sensitive material contained in their e-mail inboxes to attackers allowing them to launch more targeted social engineering attacks (e.g., spear phishing attacks). The third part of this dissertation focuses on addressing these two facets of information leaks, i.e., information leak trigerred by spyware and user by detailing out the limitations with the state-of-the- art detection techniques. In order to bring out the deficiencies in existing anti-spyware techniques, first, a new class of intelligent spyware that efficiently blends in with user activities to evade de- tection is proposed. As a defensive countermeasure, this dissertation proposes a novel randomized honeytoken based methodology that can separate normal and spyware activities with near perfect accuracy. Similarly, to detect inadvertent informational leaks caused by users sending misdirected e-mails to unintended recipient(s), this dissertation advances the existing bag-of-words based out- lier detection techniques by using a set of stylometric and linguistic features that better encapsulate the previously exchanged e-mails between the sender and the recipient. Experimentation on real v world e-mail corpus shows that the proposed technique detects over 78% of synthesized informa- tion leak outperforming other existing techniques. Another important point to be considered while devising specialized filters to address each of the e-mail based threat is the need to make them interoperable. For example, an e-mail sup- posedly sent from a financial domain, but having an URL referring to a domain blacklisted for spam is very likely a phishing e-mail. Identifying sources of attacks helps in developing attack agnostic solutions that block all sensitive communication from and to misbehaving nodes. From this perspective, this dissertation explores the feasibility of building a holistic framework that not only operates in conjunction with intrusion detection systems (IDS) to block incoming and outgo- ing traffic from and to misbehaving nodes, but also safeguard the underlying e-mail infrastructure from zero-day attacks. vi Acknowledgments My advisor, Dr. Shambhu Upadhyaya, deserves many thanks. Under his tutelage, I could trans- form my otherwise loose ideas into something concrete as this dissertation. From onset, he actively involved me in various research projects and meetings, which helped me in building and strength- ening my academic outlook. It is a great pleasure to have worked under him in the end. I would also like to thank my committee members – Dr. Hung Ngo and Dr. Sheng Zhong for their support and guidance. Dr. Ngo had been a committee member for my Masters thesis also. Dr. Ngo is a great teacher, and is ever willing to embrace new ideas and provide constructive criticisms. I am indebted for the advise he has given me on both professional and personal front. Taking a seminar and independent study under Dr. Zhong was a fruitful and invigorating experience. Every discussion with him was thorough and in-depth, always imparting something in the end. I would like to thank my mentor at Google, Dr. Arash Baratloo, for providing me the insight on transforming research grade ideas into complete tangible products. Despite his hectic schedule, he took time to read my papers and sit through my presentations to provide invaluable suggestions. In a similar vein, I would like to thank Dr. Richard Wasserman and Ms. Maureen (Cheshire)Dantzler for giving me an opportunity to work in the Transaction Risk Management (TRMS) department at Amazon Inc. It is where I managed to get a “sneak view” on anti-fraud life-cycle from detection to take down of fraudulent sellers in an industry setting. My stay at Buffalo has been a pleasant and productive experience. This, however, would not have been possible without the fun and frolic that I had with my labmates and housemates during the last several years. I thoroughly enjoyed engaging conversations and eat-out breaks I had with my friends including, Aarthie, Anusha, Ashish, Duc, Mohit, Murtuza, Ram, Sunu, Suranjan and vii Vinod. I would also like to thank Vidyaraman (Video) for agreeing to be my agreeable roommate both at home and school. On a personal note, I would like to thank my wife Anusuya. Her unwavering love and enduring support helped me paddle my way through murky situations. I hope that I have not dragged her too far in the process. I also thank her for helping me to proofread this dissertation without which it would not be in its current form. I would like to thank my grandparents, parents and brother for believing in me – even when I did not. My mother made me realize that there is much more to life than a “bookish” degree. I pray that I never wane the trust my family have bestowed upon me. Thanks to my cousins Vijay and Aarthi for being with me during the final stages of this dissertation. Last but not the least, I would like to thank all the faculty, staff, and students of computer science and engineering department with whom I interacted some point in time during my stay here. viii Table of Contents Abstract . iv Acknowledgments . vii Chapter 1 Introduction . 1 1.1 E-mail Communication . .1 1.2 What Makes Secure Communication Hard? . .3 1.2.1 Authentication . .3 1.2.2 Integrity . .4 1.2.3 Non-repudiation . .6 1.2.4 Problems with Existing E-mail Security Enforcement Schemes . .7 1.3 E-mail-based Security Threats . .9 1.4 Dissertation Scope . 11 1.5 Original Contributions . 15 1.6 Dissertation Outline . 16 Chapter 2 Background and Related Work . 18 2.1 Introduction . 18 2.1.1 Chapter Organization . 20 2.2 Phishing E-mail Detection . 21 2.2.1 Discussion . 24 2.3 Validating E-mails Through Referral Webpages Analysis . 24 2.3.1 Discussion . 27 2.4 Preventing Information leak in Emails . 28 2.4.1 Discussion . 30 2.5 Summary . 31 Chapter 3 Detection of Phishing E-mails Based on Structural and Linguistic Features 32 3.1 Introduction . 32 3.1.1 Contributions . 36 3.1.2 Chapter Organization . 37 3.2 Commonly Adopted Phishing Attack Vectors .
Recommended publications
  • Zerohack Zer0pwn Youranonnews Yevgeniy Anikin Yes Men
    Zerohack Zer0Pwn YourAnonNews Yevgeniy Anikin Yes Men YamaTough Xtreme x-Leader xenu xen0nymous www.oem.com.mx www.nytimes.com/pages/world/asia/index.html www.informador.com.mx www.futuregov.asia www.cronica.com.mx www.asiapacificsecuritymagazine.com Worm Wolfy Withdrawal* WillyFoReal Wikileaks IRC 88.80.16.13/9999 IRC Channel WikiLeaks WiiSpellWhy whitekidney Wells Fargo weed WallRoad w0rmware Vulnerability Vladislav Khorokhorin Visa Inc. Virus Virgin Islands "Viewpointe Archive Services, LLC" Versability Verizon Venezuela Vegas Vatican City USB US Trust US Bankcorp Uruguay Uran0n unusedcrayon United Kingdom UnicormCr3w unfittoprint unelected.org UndisclosedAnon Ukraine UGNazi ua_musti_1905 U.S. Bankcorp TYLER Turkey trosec113 Trojan Horse Trojan Trivette TriCk Tribalzer0 Transnistria transaction Traitor traffic court Tradecraft Trade Secrets "Total System Services, Inc." Topiary Top Secret Tom Stracener TibitXimer Thumb Drive Thomson Reuters TheWikiBoat thepeoplescause the_infecti0n The Unknowns The UnderTaker The Syrian electronic army The Jokerhack Thailand ThaCosmo th3j35t3r testeux1 TEST Telecomix TehWongZ Teddy Bigglesworth TeaMp0isoN TeamHav0k Team Ghost Shell Team Digi7al tdl4 taxes TARP tango down Tampa Tammy Shapiro Taiwan Tabu T0x1c t0wN T.A.R.P. Syrian Electronic Army syndiv Symantec Corporation Switzerland Swingers Club SWIFT Sweden Swan SwaggSec Swagg Security "SunGard Data Systems, Inc." Stuxnet Stringer Streamroller Stole* Sterlok SteelAnne st0rm SQLi Spyware Spying Spydevilz Spy Camera Sposed Spook Spoofing Splendide
    [Show full text]
  • Hacker 6-22-2020 Four Credential Scamming “Paypal” Emails Reported
    Hacker 6-22-2020 Four Credential Scamming “PayPal” Emails Reported: Two Wyoming citizens reported four credential scamming emails claiming to be from PayPal asking you to log-in and confirm information about your PayPal account. None of the links actually forwarded to PayPal. The first one had a subject line of Reminder: [Action Required] Someone just signed in using your account to make an unexpected payment. - Identity Ticket: [#90144094]. The sender was from "serviс[email protected]ρaI.сom" [email protected]. This email claims that your access has been limited and asks you to verify your PayPal information but the link is not to PayPal and instead is to http://trk.klclick3.com/// with a long string of letters. The second email’s subject line was Reminder : [Daily Report Alert] Statement update login with Google Chrome From Guinea on 19 June, 2020. The email stated that “You are in violation of PayPal’s Acceptable Use Policy,” was from the email address of "[email protected]" [email protected]. The third email’s subject line was Your account has been suspended (Ref - 09189042696) and the sender’s email address was [email protected] <m6utz07crsj2fo9- [email protected] and it claimed to find suspicious activity on your credit card and you should log-in to confirm. The final email’s subject line was [New access detected] [Statements Update] [Daily Report] Statement Update New Login: Monday, June 15, 2020 from "[email protected]" [email protected] and it also claimed that you were in violation of PayPal’s Acceptable Use Policy.
    [Show full text]
  • Development and Evaluation of a Secure Web Gateway with Messaging Functionality
    DEVELOPMENT AND EVALUATION OF A SECURE WEB GATEWAY WITH MESSAGING FUNCTIONALITY Utilizing Existing ICAP and Open-source Tools To Notify And Protect End Users from Internet Security Threats. A thesis submitted in partial fulfillment of the requirements for the Degree of Master of Science in Computer Science at the University of Canterbury by Michael Bruce Pearce University of Canterbury Department of Computer Science and Software Engineering 2010 Abstract Secure web gateways aim to protect end user systems against web based threats. Many proprietary commercial systems exist. However, their mechanisms of operation are not generally publicly known. This project undertook development and evaluation of an open source and standards based secure web gateway. The proof of concept system developed uses a combination of open source software (including the Greasyspoon ICAP Server, Squid HTTP proxy, and Clam Antivirus) and Java modules installed on the ICAP server to perform various security tasks that range from simple (such as passive content insertion) to more advanced (such as active content alteration). The makeup of the proof of concept system and the evaluation methodology for both effec- tiveness and performance are discussed. The effectiveness was tested using comparative analysis of groups of self-browsing high interaction client honey pots (employing a variety of security measures) and recording different system alteration rates. Performance was tested across a wide range of variables to determine the failure conditions and optimal set up for the components used. The system developed met the majority of the goals set, and results from testing indicate that there was an improvement in infection rates over unprotected systems.
    [Show full text]
  • Why Phishing Works Rachna Dhamija J
    Why Phishing Works Rachna Dhamija J. D. Tygar Marti Hearst [email protected] [email protected] [email protected] Harvard University UC Berkeley UC Berkeley ABSTRACT INTRODUCTION To build systems shielding users from fraudulent (or What makes a web site credible? This question has been phishing) websites, designers need to know which attack addressed extensively by researchers in computer-human strategies work and why. This paper provides the first interaction. This paper examines a twist on this question: empirical evidence about which malicious strategies are what makes a bogus website credible? In the last two successful at deceiving general users. We first analyzed a years, Internet users have seen the rapid expansion of a large set of captured phishing attacks and developed a set scourge on the Internet: phishing, the practice of direct- of hypotheses about why these strategies might work. We ing users to fraudulent web sites. This question raises then assessed these hypotheses with a usability study in fascinating questions for user interface designers, because which 22 participants were shown 20 web sites and asked both phishers and anti-phishers do battle in user interface to determine which ones were fraudulent. We found that space. Successful phishers must not only present a high- 23% of the participants did not look at browser-based credibility web presence to their victims; they must create cues such as the address bar, status bar and the security a presence that is so impressive that it causes the victim to indicators, leading to incorrect choices 40% of the time. fail to recognize security measures installed in web We also found that some visual deception attacks can fool browsers.
    [Show full text]
  • Scam and Complaints Industry Report 2012 Q2.Pdf
    Thank you for viewing the Scambook Second Quarter 2012 Report. Scambook is an online complaint resolution platform. Anyone can fall victim to fraud, regardless of age, gender, race, nationality, education level, economic status or disability. At Scambook, our goal is to find justice for fraud victims and prevent future exploitation by building communities and educating the public with resources such as this Report. We begin this Report with an introduction to Scambook, including a statisti- cal overview concerning the prevalence of fraud in the United States. In this section, we will provide exclusive data about the Top 10 Most Affected States in the U.S. for Q2 2012 and compare this data to figures gathered in Q1. Then, we will move on to Fraud in Focus. This section provides an in-depth industry analysis of the four most aggressive, widespread fraud schemes for Q2 2012: • Fake Job Offers • Smishing/Text Message Fraud • Phishing/Email Fraud • Unauthorized Credit Card Charges For each Fraud in Focus, we will summarize the fraud scheme, provide back- ground context, disseminate data gathered from our users and describe a Case Study that exemplifies the fraud scheme. Each section will also include expert Warning Signs and Safety Tips address- ing each specific fraud scheme. In addition to our Fraud in Focus analysis, this Report contains general Consumer Safety Tips, Testimonies from actual Scam- book members and External Resources We encourage you to download this Report and share it with your community. We hope this Report will serve as an educational guide for consumers, empow- ering them with the information they need to avoid falling victim to fraud.
    [Show full text]
  • Phishing-Book-Chapte
    Handbook of Research on Social and Organizational Liabilities in Information Security Manish Gupta State University of New York at Buffalo, USA Raj Sharman State University of New York at Buffalo, USA INFORMATION SCIENCE REFERENCE Hershey • New York Director of Editorial Content: Kristin Klinger Director of Production: Jennifer Neidig Managing Editor: Jamie Snavely Assistant Managing Editor: Carole Coulson Typesetter: Jeff Ash Cover Design: Lisa Tosheff Printed at: Yurchak Printing Inc. Published in the United States of America by Information Science Reference (an imprint of IGI Global) 701 E. Chocolate Avenue, Suite 200 Hershey PA 17033 Tel: 717-533-8845 Fax: 717-533-8661 E-mail: [email protected] Web site: http://www.igi-global.com and in the United Kingdom by Information Science Reference (an imprint of IGI Global) 3 Henrietta Street Covent Garden London WC2E 8LU Tel: 44 20 7240 0856 Fax: 44 20 7379 0609 Web site: http://www.eurospanbookstore.com Copyright © 2009 by IGI Global. All rights reserved. No part of this publication may be reproduced, stored or distributed in any form or by any means, electronic or mechanical, including photocopying, without written permission from the publisher. Product or company names used in this set are for identification purposes only. Inclusion of the names of the products or companies does not indicate a claim of ownership by IGI Global of the trademark or registered trademark. Library of Congress Cataloging-in-Publication Data Handbook of research on social and organizational liabilities in information security / Manish Gupta and Raj Sharman, editors. p. cm. Includes bibliographical references and index. Summary: "This book offers insightful articles on the most salient contemporary issues of managing social and human aspects of information security"--Provided by publisher.
    [Show full text]
  • Priority Development Assistance Fund Scam
    Priority Development Assistance Fund scam From Wikipedia, the free encyclopedia The Priority Development Assistance Fund scam, also called the PDAF scam or the pork barrel scam, is a political scandal involving the alleged misuse by several members of the Congress of the Philippines of their Priority Development Assistance Fund (PDAF, popularly called "pork barrel"), a lump-sum discretionary fund granted to each member of Congress for spending on priority development projects of the Philippine government, mostly on the local level. The scam was first exposed in the Philippine Daily Inquirer on July 12, 2013,[1] with the six-part exposé of the Inquireron the scam pointing to businesswoman Janet Lim-Napoles as the scam's mastermind after Benhur K. Luy, her second cousin and former personal assistant, was rescued by agents of theNational Bureau of Investigation on March 22, 2013, four months after he was detained by Napoles at her unit at the Pacific Plaza Towers in Fort Bonifacio.[2] Initially centering on Napoles' involvement in the 2004 Fertilizer Fund scam, the government investigation on Luy's testimony has since expanded to cover Napoles' involvement in a wider scam involving the misuse of PDAF funds from 2003 to 2013. It is estimated that the Philippine government was defrauded of some ₱10 billion in the course of the scam,[1] having been diverted to Napoles, participating members of Congress and other government officials. Aside from the PDAF and the fertilizer fund maintained by the Department of Agriculture, around ₱900 million
    [Show full text]
  • Fraud Report FINAL 23/12/03 3:25 PM Page I
    Fraud Report FINAL 23/12/03 3:25 PM Page i M E I A N L T R O A F P V I I A C T O R PARLIAMENT OF VICTORIA DRUGS AND CRIME PREVENTION COMMITTEE INQUIRY INTO FRAUD AND ELECTRONIC COMMERCE Final Report January 2004 by Authority Government Printer for the State of Victoria No. 55 Session 2003-2004 Fraud Report FINAL 23/12/03 3:25 PM Page ii The Report was prepared by the Drugs and Crime Prevention Committee. Drugs and Crime Prevention Committee Inquiry into Fraud and Electronic Commerce: – Final Report DCPC, Parliament of Victoria ISBN: 0-646-43091-2 Drugs and Crime Prevention Committee Level 8 35 Spring Street Melbourne Victoria 3000 Telephone: (03) 9651 3541 Facsimile: (03) 9651 3603 Email: [email protected] http://www.parliament.vic.gov.au/dcpc page ii Fraud Report FINAL 23/12/03 3:25 PM Page iii Drugs and Crime Prevention Committee – 55th Parliament Ms Carolyn Hirsh, M.L.C.– Chair The Hon. Robin Cooper, M.L.A. – Deputy Chairman Ms Kirstie Marshall, M.L.A. Mr Ian Maxfield, M.L.A. The Hon. Sang Minh Nguyen, M.L.C. Dr Bill Sykes, M.L.A. Mr Kim Wells, M.L.A. Drugs and Crime Prevention Committee – 54th Parliament The Hon. Cameron Boardman, M.L.C. – Chairman Mr Bruce Mildenhall, M.L.A. – Deputy Chairman The Hon. Robin Cooper, M.L.A. Mr Kenneth Jasper, M.L.A. Mr Hurtle Lupton, M.L.A. The Hon. Sang Minh Nguyen, M.L.C.
    [Show full text]
  • UC San Diego UC San Diego Electronic Theses and Dissertations
    UC San Diego UC San Diego Electronic Theses and Dissertations Title Investigating Large-Scale Internet Abuse Through Web Page Classification Permalink https://escholarship.org/uc/item/8jp0z4m4 Author Der, Matthew Francis Publication Date 2015 Peer reviewed|Thesis/dissertation eScholarship.org Powered by the California Digital Library University of California UNIVERSITY OF CALIFORNIA, SAN DIEGO Investigating Large-Scale Internet Abuse Through Web Page Classification A dissertation submitted in partial satisfaction of the requirements for the degree of Doctor of Philosophy in Computer Science by Matthew F. Der Committee in charge: Professor Lawrence K. Saul, Co-Chair Professor Stefan Savage, Co-Chair Professor Geoffrey M. Voelker, Co-Chair Professor Gert Lanckriet Professor Kirill Levchenko 2015 Copyright Matthew F. Der, 2015 All rights reserved. The Dissertation of Matthew F. Der is approved and is acceptable in quality and form for publication on microfilm and electronically: Co-Chair Co-Chair Co-Chair University of California, San Diego 2015 iii DEDICATION To my family: Kristen, Charlie, David, Bryan, Sarah, Katie, and Zach. iv EPIGRAPH Everything should be made as simple as possible, but not simpler. | Albert Einstein Sic transit gloria . glory fades. | Max Fischer v TABLE OF CONTENTS Signature Page . iii Dedication . iv Epigraph . v Table of Contents . vi List of Figures . ix List of Tables . xi Acknowledgements . xiii Vita . xviii Abstract of the Dissertation . xix Chapter 1 Introduction . 1 1.1 Contributions . 4 1.2 Organization . 6 Chapter 2 Background . 8 2.1 The Spam Ecosystem . 8 2.1.1 Spam Value Chain . 9 2.1.2 Click Trajectories Finding . 10 2.1.3 Affiliate Programs .
    [Show full text]
  • Study on Phishing Attacks and Antiphishing Tools
    International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056 Volume: 03 Issue: 01 | Jan-2016 www.irjet.net p-ISSN: 2395-0072 STUDY ON PHISHING ATTACKS AND ANTIPHISHING TOOLS Dr.Radha Damodaram Associate Professor, School of Computer Science,CMS College of Science & Commerce, Coimbatore, Tamili Nadu, India ---------------------------------------------------------------------***--------------------------------------------------------------------- Abstract - The Internet has a remarkable platform usability evaluation, a number of usability issues may for common people communication. Persons with found. [13]. criminal mind have found a way of stealing personal information without actually meeting them and with 2. STEPS IN PHISHING the least risk of being caught. It is called Phishing. Phishing poses a huge threat to the e-commerce A person who engaged in malware activities is called a industry. Not only does it shatter the confidence of phisher. Phishing attacks today typically employ customers towards e-commerce, but also causes generalized “lures”, intimidating users and creating fear – electronic service providers tremendous economic a common example is “we need you to confirm your loss. Hence it is essential to know about phishing. This account details or we must shut your account down”. An paper gives awareness about phishing attacks and approach which is believed to become more and more anti-phishing tools. common is context aware attack: this is a more complex approach as it not only uses threat or enticement, but Key Words: Phishing, phishing steps, phishing types, makes the victim think of the messages as expected, and Anti-phishing tools. therefore legitimate. 1. INTRODUCTION The method used by phishers is usually to make fraudulent websites, similar to the genuine website by Phishing is an act of attempting a victim for fraudulently mimicking the HTML code containing the same images, acquires sensitive information by impersonating a text and sections.
    [Show full text]
  • Towards Electronic Media Awareness: the Basics of Security Engineering in FL Teacher Education
    Augustyn Surdyk' Towards electronic media awareness: The basics of security engineering in FL teacher education 1. Introduction Foreign language teachers as well as students and graduates of philological studies, who engage more and more often in other professions (outside educa­ tion), similar to all other people, are internet users. Likewise, unfortunately, they equally have to face the dangers arising from the use of these media, either for personal or for professional reasons. It needs to be mentioned that not all graduates of philological studies are prepared in the course of their studies to perform the job of a teacher, moreover, even those who are do not always choose to work in the field of teaching. The scale of the phenomenon is so large that it may be claimed, teachers in fact may soon transpire to be a minority among the graduates of philology studies'. Each year the number of specializations available to students of philology at Polish universities is rising. It enables the students to study and prepare for many other profes­ sions, outside the field of education. Among philology graduates there is a rise in the number of translators, whose work may eventually vary from single-person microfirms, through organised translation companies, to posi­ tions as translators employed by the European Parliament in Brussels as well as other specialists who become employed in various spheres of the economy and public life3 in such professions as: intercultural communication trainer, intercultural conflicts mediator, cultural advisor and intermediary, advertis­ ing industry worker, journalist, columnist, written and spoken communica­ tion specialist, technical documentation editor, programmer and hypertext designer, linguistic design specialist of computer assisted educational systems , Some fragments of this chapter constituted an article already published by the same author in the Polish language.
    [Show full text]
  • Fraud Report 29/10/02 12:37 PM Page I
    Fraud Report 29/10/02 12:37 PM Page i M E I A N L T R O A F P V I I A C T O R PARLIAMENT OF VICTORIA DRUGS AND CRIME PREVENTION COMMITTEE INQUIRY INTO FRAUD AND ELECTRONIC COMMERCE: EMERGING TRENDS AND BEST PRACTICE RESPONSES Discussion Paper October 2002 by Authority Government Printer for the State of Victoria Fraud Report 29/10/02 12:37 PM Page ii Submissions are invited The Committee welcomes written submissions in response to the issues raised in this Discussion Paper or on any matter related to the Terms of Reference of the Inquiry. To assist interested parties in making submissions a number of questions have been posed throughout the Discussion Paper. Details of how to make a Submission are included in the Insert. The Committee requires all submissions to be signed hard copy originals but would also appreciate an electronic copy. Submissions should be sent by 30 January 2003 to: Inquiry into Fraud and Electronic Commerce The Drugs and Crime Prevention Committee Level 8, 35 Spring Street, Melbourne Victoria 3000 Telephone: (03) 9651 3541 Facsimile: (03) 9651 3603 Email: [email protected] http://www.parliament.vic.gov.au/dcpc The Discussion Paper was prepared by the Drugs and Crime Prevention Committee. Drugs and Crime Prevention Committee Inquiry into Fraud and Electronic Commerce: Emerging Trends and Best Practice Responses – Discussion Paper DCPC, Parliament of Victoria ISBN: 0-7311-5292-1 The Drugs and Crime Prevention Committee: Level 8 35 Spring Street, Melbourne Victoria 3000 Telephone: (03) 9651 3541 Facsimile: (03) 9651 3603 Email: [email protected] http://www.parliament.vic.gov.au/dcpc page ii Fraud Report 29/10/02 2:50 PM Page iii Drugs and Crime Prevention Committee Members The Hon.
    [Show full text]