The Web’s Most Dangerous Search Terms (PDF; 2.2 MB)

Unless you work for or own an online business, chances are you’ve never heard the terms “search engine optimization” (SEO) and “search engine marketing” (SEM). Yet these two phrases—SEO (the effort by site owners to get their website ranked higher by search engines) and SEM (the use of paid advertising to gain prominent placement on search engines) are increasingly important vocabulary for businesses that seek to prosper on the web. Unfortunately, legitimate businesses are not the only ones gaining fluency with this new language.

The scammers—from solo operators to organized criminals—have quickly realized that the same search engines that enable legitimate businesses to reach more consumers can also be used by criminals to separate more victims from more of their money.

This paper examines a new phenomenon—the use of search engines as a conduit for profit-driven hackers—by analyzing the risk of searching for more than 2,000 of the most popular words and phrases (“keywords”) used in search engines in 2008. From “Jonas Brothers tickets” to “game cheats” to “Viva la Vida lyrics,” these keywords represent a broad slice of what search expert John Battelle calls our “database of intentions.”

Along with our “intentions,” this database also reveals how much risk we expose ourselves to each and every time we put our favorite search engines to use. How much risk? For some keywords like “popular screensavers” and “descargar google” and certain of their resulting pages, the risk can be pervasive— 75% or more results (three out of four) can lead to increased web security risk. This should not be surprising to observers of security trends. Since hacking for fame has given way to hacking for profit, malicious players have grown increasingly sophisticated in their ability to find large pools of potential victims. By measuring the relative risk of popular search terms, this study confirms that scammers continue to target the largest pools of victims.

But this study also found some interesting evidence to the contrary. Previous McAfee® studies of web safety have shown about 4% of sites to be risky. This is a broad measure of the overall risk we face when we use the web. By contrast, the average risk level of all results pages we studied was just 1.7%. This study is broad and directional. New tools and research methods need to be deployed to allow us to better understand the mechanics of how search is being misused. We hope this study helps pave the way for other studies that take on these important questions.

Source: McAfee

Hat tip: DG

This entry was posted on Tuesday, June 9th, 2009 and is filed under Information Seeking, Papers and Presentations, Search News, Source File, Technology and Internet, Web Search. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.