Representatives of the company informed of their work on the tool with an open TrickURI code and a system alerting of fishing sites.
Proposal to change the usual URL form was made by Google Chrome security team in early fall 2018.
Decision to make changes was caused by increasing of fraud incidents. In such cases, users are, as a rule, misinformed by long and confusing web site addresses.
At Bay Area Enigma world conference held on January 29, 2019, Emily Stark, representative of Chrome, informed of the first steps that have been taken to increase the reliability of URLs. Emily Stark, security engineer-in-chief, also emphasized that Google seeks to make it impossible to obtain material or informative benefits through obscure site URLs.
An example of fraudulent actions: following a link that creates the appearance of going to reliable web sites, and, in fact, redirects the user to malicious ones. In addition, attackers often create phishing web sites with URL that is not significantly different from the address of the real web site, hoping that a user will not notice slight differences. For instance, official address of "google" is written like "g00gle". Chrome security team is developing tow solutions that will allow preventing fraudulent activities of such format.
At present, the company specialists are focused on searching for addresses which somehow look different from standard ones. With this objective in view, unique tool TrickURI was launched, it shows the appearance of a web site address in certain cases. In addition, the team is developing an alerting system that will mark phishing web sites, thus, alerting the users. According Emily Stark, the main problem here is to configure the system so that it does not mark reliable sites by mistake.
At present, the main service informing users and developers of malicious web site activity and phishing is Google Safe Browsing.
Currently, the Chrome team of professionals is engaged in improving the service and implementing function of URL recognition. Moreover, it is planned to develop a tool that will help users to decrypt shortened URLs.