Phishing poses a major security risk to organizations and individuals leading to loss of billions of dollars yearly. While risk communication serves as a tool to mitigate phishing attempts, it is imperative to create automated phishing detection tools. Numerous Natural Language Processing (NLP) approaches have been deployed to tackle phishing. However, phishing attempts continue to increase exponentially, which reiterates the need for more effective approach. To address this, we have developed an anti-phishing tool called; PhisherCop. PhisherCop is built upon Stochastic Gradient Descent classifier (SGD) and Support Vector Classifier (SVC) which showed an average accuracy of 96%, performing better than six other popular classifiers including: Decision Tree, Logistics Regression, Random Forest, Gradient Boosting Classifier, K-Nearest Neighbors and Multinomial Naive Bayes. Our tool is significant in distinguishing between phishing and legitimate content both over emails and text messages.
Get full access to this article
View all access options for this article.
References
1.
AbbasiA.ZahediF.ChenY. (2012). Impact of anti-phishing tool performance on attack success rates. In 2012 ieee international conference on intelligence and security informatics (pp. 12-17).
2.
AfriantoM. A.WasesaM. (2020). Booking prediction models for peer- I to-peer accommodation listings using logistics regression, decision tree, k-nearest neighbor, and random forest classifiers. Journal of Information Systems Engineering and Business Intelligence, 6(2), 123-132.
3.
AggarwalS.KumarV.SudarsanS. (2014). Identification and detection of phishing emails using natural language processing techniques. In Proceedings of the 7th international conference on security of information and networks (pp. 217-222).
4.
AkinyeluA. A.AdewumiA. O. (2014). Classification of phishing email using random forest machine learning technique. Journal of Applied Mathematics, 2014.
5.
DasS.AbbottJ.GopavaramS.BlytheJ.CampL. J. (2020). User-centered risk communication for safer browsing. In International conference on financial cryptography and data security (pp. 18-35).
6.
DasS.KimA.TingleZ.Nippert-EngC. (2019). All about phishing: Exploring user research through a systematic literature review. arXiv preprint arXiv:1908.05897.
7.
DasS.Nippert-EngC.CampL. J. (2022). Evaluating user susceptibility to phishing attacks. Information & Computer Security.
8.
DevlinJ.ChangM.-W.LeeK.ToutanovaK. (2018). Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805.
9.
DhamijaR.TygarJ. D.HearstM. (2006). Why phishing works. In Proceedings ofthe sigchi conference on human factors in computing systems (pp. 581-590).
10.
DoganU.GlasmachersT.IgelC. (2016). A unified view on multi-class support vector classification. J. Mach. Learn. Res., 17(45), 1-32.
11.
ElshoushH. T.DinarE. A. (2019). Using adaboost and stochastic gradient descent (sgd) algorithms with r and orange software for filtering e-mail spam. In 2019 11th computer science and electronic engineering (ceec) (pp. 41-46).
12.
Featureextraction. (n.d.). Retrieved from https://scikit-learn.org/ stable/modules/generated/sklearn.feature_extraction .text.TfidfTransformer.html
13.
FengL.LiuG.LuoS.LiuS. (2017). A transferable framework: Classification and visualization of mooc discussion threads. In International conference on neural information processing (pp. 377-384).
14.
FormL. M.ChiewK. L.TiongW. K., et al. (2015). Phishing email detection technique by using hybrid features. In 2015 9th international conference on it in asia (cita) (pp. 1-5).
15.
IqbalA.BaruaK. (2019). A real-time emotion recognition from speech using gradient boosting. In 2019 international conference on electrical, computer and communication engineering (ecce) (pp. 1-5).
KabirF.SiddiqueS.KotwalM. R. A.HudaM. N. (2015). Banglatext document categorization using stochastic gradient descent (sgd) classifier. In 2015 international conference on cognitive computing and information processing (ccip) (pp. 1-4).
18.
KhonjiM.IraqiY.JonesA. (2013). Phishing detection: a literature survey. IEEE Communications Surveys & Tutorials, 15(4), 2091-2121.
19.
MilletaryJ.CenterC. C. (2005). Technical trends in phishing attacks. Retrieved December, 1 (2007), 3-3.
20.
MishraS.SoniD. (2019). Sms phishing and mitigation approaches. In 2019 twelfth international conference on contemporary computing (ic3) (pp.1-5).
21.
MishraS.SoniD. (2021). Dsmishsms-a system to detect smishing sms. Neural Computing and Applications, 1-18.
22.
NaheemN.AbebeT.StuartR.SanchariD. (2022). Phishercop – an automated tool using ml classifiers for phishing detection. In 2022 ieee symposium on security and privacy.
23.
PalM. (2005). Random forest classifier for remote sensing classification. International journal of remote sensing, 26(1), 217-222.
24.
PengT.HarrisI.SawaY. (2018). Detecting phishing attacks using natural language processing and machine learning. In 2018 ieee 12th international conference on semantic computing (icsc) (pp. 300-301).
25.
ShahiT. B.ShakyaS. (2018). Nepali sms filtering using decision trees, neural network and support vector machine. In 2018 international conference on advances in computing, communication control and networking (icacccn) (pp. 1038-1042).
26.
ShankarA.ShettyR.NathB. (2019). A review on phishing attacks. International Journal ofApplied Engineering Research, 14(9), 2171-2175.
27.
SwainP. H.HauskaH. (1977). The decision tree classifier: Design and potential. IEEE Transactions on Geoscience Electronics, 15(3), 142-147.
28.
SyarifI.Prugel-BennettA.WillsG. (2016). Svm parameter optimization using grid search and genetic algorithm to improve classification performance. Telkomnika, 14(4), 1502.
29.
VermaR.ShashidharN.HossainN. (2012). Detecting phishing emails the natural language way. In European symposium on research in computer security (pp. 824-841).
30.
WuL.DuX.WuJ. (2014). Mobifish: A lightweight anti-phishing scheme for mobile phones. In 2014 23rd international conference on computer communication and networks (icccn) (pp. 1-8).
31.
YangZ.DaiZ.YangY.CarbonellJ.SalakhutdinovR. R.LeQ. V. (2019). Xlnet: Generalized autoregressive pretraining for language understanding. Advances in neural information processing systems, 32.
32.
YinM.Wortman VaughanJ.WallachH. (2019). Understanding the effect of accuracy on trust in machine learning models. In Proceedings ofthe 2019 chi conference on human factors in computing systems (pp. 1-12).
33.
ZeydanH. Z.SelamatA.SallehM. (2014). Survey of anti-phishing tools with detection capabilities. In 2014 international symposium on biometrics and security technologies (isbast) (pp. 214-219).
