Intelligent antiphishing framework to detect phishing scam: A hybrid classification approach. (20th September 2021)

• Record Type: Journal Article
• Authors: Marimuthu, Satheesh Kumar; Kalampatti Gopalasamy, Srinivasagan; Ben‐Othman, Jalel
• Is Part Of: Software, practice & experience. Volume 52:Number 2(2022)
• Page Start: 459
• Page End: 481
• Publication Date: 2021-09-20
• Subjects: datasets -- machine learning -- malicious URL -- phishing links -- phishing detection -- URL attributes; Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.3031
• Languages: English
• ISSNs: 0038-0644

Abstract

ABSTRACT: In the inevitably hi‐tech universe of cybercrimes, one of the major still prevailing methods is the usage of the malicious URLs and creating a Phishing link to obtain user credentials from the people. This method is highly subtle and has more effect on people's lives as well as corporate loss. To identify the malicious URLs, the security community has listed blacklists and benign links online. Still, as the technology is being developed day by day, the attackers try to create new phishing URLs using new social engineering methods that could be easily forged into the user's account. To improve the generality of malicious URL detectors, machine‐learning techniques have been explored with increasing attention in recent years. This article addresses the detection of malicious URLs combining the intelligence of both the heuristic‐based method and the machine learning process. It has been found that there are many possibilities for detecting zero‐day attacks and spear‐phishing attacks when incorporating both lexical features and machine learning methods. Out of the six‐batch learning process analyzed, we implement a decision tree algorithm in our framework with 99.47% accuracy during evaluation. The true positive values gained in our proposed hybrid framework is 99.2% and indicate <1% of the false‐positive values. The implementation shows a precision level higher than the previous model developed and by other antiphishing techniques. A high detection rate on zero‐day and spear‐phishing attacks and overall results reveal that our system outclasses the current approach to detecting phishing scams.