Detecting Phishing URLs Based on a Deep Learning Approach to Prevent Cyber-Attacks
Source abstract
Abstract
Phishing is one of the most widely observed types of internet cyber-attack, through which hundreds of clients using different internet services are targeted every day through different replicated websites. The phishing attacker spreads messages containing false URL links through emails, social media platforms, or messages, targeting people to steal sensitive data like credentials. Attackers generate phishing URLs that resemble those of legitimate websites to gain these confidential data. Hence, there is a need to prevent the siphoning of data through the duplication of trustworthy websites and raise public awareness of such practices. For this purpose, many machine learning and deep learning models have been employed to detect and prevent phishing attacks, but due to the ever-evolving nature of these attacks, many systems fail to provide accurate results. In this study, we propose a deep learning-based system using a 1D convolutional neural network to detect phishing URLs. The experimental work was performed using datasets from Phish-Tank, UNB, and Alexa, which successfully generated 200 thousand phishing URLs and 200 thousand legitimate URLs. The experimental results show that the proposed system achieved 99.7% accuracy, which was better than the traditional models proposed for URL-based phishing detection.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Spam and Phishing Detection · Advanced Malware Detection Techniques · Network Security and Intrusion Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Centre of Excellence in Cybercrime and Digital Forensics, Naif Arab University for Security Sciences, Riyadh 14812, Saudi Arabia
Department of Information Technology, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia
Funding
Naif Arab University for Security Sciences
References (53)
Show source-provided references
1. A Deep Learning-Based Framework for Phishing Website Detection10.1109/ACCESS.2021.3137636 ↗
2. Yerima, S.Y., and Alzaylaee, M.K. (2020, January 19–21). High Accuracy Phishing Detection Based on Convolutional Neural Networks. Proceedings of the ICCAIS 2020–3rd International Conference on Computer Applications and Information Security, Riyadh, Saudi Arabia.10.1109/ICCAIS48893.2020.9096869 ↗
3. Jakobsson, M., and Myers, S. (2006). Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft, John Wiley & Sons.10.1002/0470086106 ↗
4. The state of phishing attacks10.1145/2063176.2063197 ↗
5. PDGAN: Phishing Detection With Generative Adversarial Networks10.1109/ACCESS.2022.3168235 ↗
6. Rajitha, K., and Vijayalakshmi, D. (2018, January 20–22). Suspicious URLs Filtering Using Optimal RT-PFL: A Novel Feature Selection Based Web URL Detection. Proceedings of the Smart Innovation, Systems and Technologies, Queensland, Australia.10.1007/978-981-10-5547-8_24 ↗
7. (2024, August 19). APWG|Phishing Activity Trends Reports. Available online: https://apwg.org/trendsreports/.
8. Machine Learning Based Phishing Detection from URLs10.1016/j.eswa.2018.09.029 ↗
9. Bu, S.J., and Cho, S.B. (2021). Deep Character-Level Anomaly Detection Based on a Convolutional Autoencoder for Zero-Day Phishing Url Detection. Electron, 10.10.3390/electronics10121492 ↗
10. Kang, J.M., and Lee, D.H. (2007, January 21–23). Advanced White List Approach for Preventing Access to Phishing Sites. Proceedings of the 2007 International Conference on Convergence Information Technology (ICCIT 2007), Gwangju, Republic of Korea.10.1109/ICCIT.2007.4420308 ↗
11. Detecting Phishing Web Pages with Visual Similarity Assessment Based on Earth Mover’s Distance (EMD)10.1109/TDSC.2006.50 ↗
12. Cao, Y., Han, W., and Le, Y. (2008, January 27–31). Anti-Phishing Based on Automated Individual White-List. Proceedings of the ACM Conference on Computer and Communications Security, Alexandria, VA, USA.10.1145/1456424.1456434 ↗
13. Oest, A., Safei, Y., Doupe, A., Ahn, G.J., Wardman, B., and Warner, G. (2018, January 15–17). Inside a Phisher’s Mind: Understanding the Anti-Phishing Ecosystem through Phishing Kit Analysis. Proceedings of the 2018 APWG Symposium on Electronic Crime Research (eCrime), San Diego, CA, USA.10.1109/ECRIME.2018.8376206 ↗
14. Sharifi, M., and Siadati, S.H. (April, January 31). A Phishing Sites Blacklist Generator. Proceedings of the AICCSA 08–6th IEEE/ACS International Conference on Computer Systems and Applications, Doha, Qatar.
15. Zhang, Y., Hong, J.I., and Cranor, L.F. (2007, January 8–12). Cantina: A Content-Based Approach to Detecting Phishing Web Sites. Proceedings of the 16th International World Wide Web Conference (WWW2007), Banff, AB, Canada.10.1145/1242572.1242659 ↗
16. Prakash, P., Kumar, M., Rao Kompella, R., and Gupta, M. (2010, January 14–19). PhishNet: Predictive Blacklisting to Detect Phishing Attacks. Proceedings of the Proceedings IEEE INFOCOM, San Diego, CA, USA.10.1109/INFCOM.2010.5462216 ↗
17. CANTINA+: A Feature-Rich Machine Learning Framework for Detecting Phishing Web Sites. ACM Trans
18. SeByte: Scalable Clone and Similarity Search for Bytecode10.1016/j.scico.2013.10.006 ↗
19. Ozker, U., and Sahingoz, O.K. (2020, January 25–27). Content Based Phishing Detection with Machine Learning. Proceedings of the 2020 International Conference on Electrical Engineering (ICEE 2020), Istanbul, Turkey.10.1109/ICEE49691.2020.9249892 ↗
20. Liu, W., Huang, G., Liu, X., Zhang, M., and Deng, X. (2005, January 10–14). Detection of Phishing Webpages Based on Visual Similarity. Proceedings of the 14th International World Wide Web Conference (WWW2005), Chiba, Japan.
21. Abdelnabi, S., Krombholz, K., and Fritz, M. (2020, January 9–13). VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity. Proceedings of the ACM Conference on Computer and Communications Security, Virtual Event.10.1145/3372297.3417233 ↗
22. Chen, J.L., Ma, Y.W., and Huang, K.L. (2020). Intelligent Visual Similarity-Based Phishing Websites Detection. Symmetry, 12.10.3390/sym12101681 ↗
23. Detecting Malicious URL Using Machine Learning: A Survey10.22214/ijraset.2020.5447 ↗
24. Cui, Q., Jourdan, G.V., Bochmann, G.V., Couturier, R., and Onut, I.V. (2017, January 3–7). Tracking Phishing Attacks over Time. Proceedings of the 26th International World Wide Web Conference (WWW 2017), Perth, Australia.10.1145/3038912.3052654 ↗
25. Alfouzan, N.A., and Narmatha, C. (2022, January 25–27). A Systematic Approach for Malware URL Recognition. Proceedings of the 2022 2nd International Conference on Computing and Information Technology (ICCIT 2022), Tabuk, Saudi Arabia.10.1109/ICCIT52419.2022.9711614 ↗
26. A Predictive Model for Phishing Detection
27. Atimorathanna, D.N., Ranaweera, T.S., Devdunie Pabasara, R.A.H., Perera, J.R., and Abeywardena, K.Y. (2020, January 10–11). NoFish; Total Anti-Phishing Protection System. Proceedings of the ICAC 2020 2nd International Conference on Advancements in Computing, Colombo, Sri Lanka.
28. Chrome Extension for Detecting Phishing Websites
29. LINKCALCULATOR–AN EFFICIENT LINK-BASED PHISHING DETECTION TOOL10.26480/aim.02.2020.37.44 ↗
30. Wu, J., Yang, Z., Guo, L., Li, Y., and Liu, W. (2019, January 16–18). Convolutional Neural Network with Character Embeddings for Malicious Web Request Detection. Proceedings of the Proceedings–2019 IEEE Intl Conf on Parallel and Distributed Processing with Applications, Big Data and Cloud Computing, Sustainable Computing and Communications, Social Computing and Networking, ISPA/BDCloud/SustainCom/SocialCom 2019, Xiamen, China.10.1109/ISPA-BDCloud-SustainCom-SocialCom48970.2019.00094 ↗
31. Athiwaratkun, B., and Stokes, J.W. (2017, January 5–9). Malware Classification with LSTM and GRU Language Models and a Character-Level CNN. Proceedings of the ICASSP, IEEE International Conference on Acoustics, Speech and Signal Processing–Proceedings, New Orleans, LA, USA.10.1109/ICASSP.2017.7952603 ↗
32. Huang, Y., Yang, Q., Qin, J., and Wen, W. (2019, January 5–8). Phishing URL Detection via CNN and Attention-Based Hierarchical RNN. Proceedings of the Proceedings–2019 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications/13th IEEE International Conference on Big Data Science and Engineering, TrustCom/BigDataSE 2019, Rotorua, New Zealand.10.1109/TrustCom/BigDataSE.2019.00024 ↗
33. Predicting Phishing Websites Based on Self-Structuring Neural Network10.1007/s00521-013-1490-z ↗
34. Shibahara, T., Yamanishi, K., Takata, Y., Chiba, D., Akiyama, M., Yagi, T., Ohsita, Y., and Murata, M. (2017, January 21–25). Malicious URL Sequence Detection Using Event De-Noising Convolutional Neural Network. Proceedings of the IEEE International Conference on Communications, Paris, France.10.1109/ICC.2017.7996831 ↗
35. Machine Learning and Deep Learning10.1007/s12525-021-00475-2 ↗
36. Review of Deep Learning: Concepts, CNN Architectures, Challenges, Applications, Future Directions10.1186/s40537-021-00444-8 ↗
37. Deep Learning Applications for IoT in Health Care: A Systematic Review. Informatics Med10.1016/j.imu.2021.100550 ↗
38. Deep Learning and Implementations in Banking10.1007/s40745-020-00300-1 ↗
39. Challenges for the Repeatability of Deep Learning Models10.1109/ACCESS.2020.3039833 ↗
40. Guo, T., Dong, J., Li, H., and Gao, Y. (2017, January 10–12). Simple convolutional neural network on image classification. Proceedings of the 2017 IEEE 2nd International Conference on Big Data Analysis (ICBDA), Beijing, China.10.1109/ICBDA.2017.8078730 ↗
41. 1D-CNN Based Model for Classification and Analysis of Network Attacks
42. Phishing Websites Detection via CNN and Multi-Head Self-Attention on Imbalanced Datasets10.1016/j.cose.2021.102372 ↗
43. Enhancing Detection of Malicious Urls Using Boosting and Lexical Features10.32604/iasc.2022.020229 ↗
44. Pawluszek-Filipiak, K., and Borkowski, A. (2020). On the Importance of Train-Test Split Ratio of Datasets in Automatic Landslide Detection by Supervised Classification. Remote Sens., 12.10.3390/rs12183054 ↗
45. Modelling an Efficient URL Phishing Detection Approach Based on a Dense Network Model10.32604/csse.2023.036626 ↗
46. GramBeddings: A New Neural Network for URL Based Identification of Phishing Web Pages Through N-Gram Embeddings10.1016/j.cose.2022.102964 ↗
47. Dhanavanthini, P., and Chakkravarthy, S.S. (2023). Phish-Armour: Phishing Detection Using Deep Recurrent Neural Networks. Soft Comput.10.1007/s00500-023-07962-y ↗
48. Intelligent Phishing Detection Scheme Using Deep Learning Algorithms10.1108/JEIM-01-2020-0036 ↗
49. SI-BBA–A Novel Phishing Website Detection Based on Swarm Intelligence with Deep Learning10.1016/j.matpr.2021.07.178 ↗
50. Siva Satya Sreedhar, P., Velpula, S., Parise, R., Vamsi, N.K., and Chaitanya, S.K. (2023, January 17–18). Phishing Attack Detection Using Convolutional Neural Networks. Proceedings of the 2023 9th International Conference on Advanced Computing and Communication Systems, ICACCS 2023, Coimbatore, India.
51. Detecting Phishing Websites through Improving Convolutional Neural Networks with Self-Attention Mechanism10.1016/j.asej.2024.102643 ↗
52. Saha, I., Sarma, D., Chakma, R.J., Alam, M.N., Sultana, A., and Hossain, S. (2020, January 20–22). Phishing attacks detection using deep learning approach. Proceedings of the 2020 Third International Conference on Smart Systems and Inventive Technology (ICSSIT), Tirunelveli, India.10.1109/ICSSIT48917.2020.9214132 ↗
53. Detection of phishing URLs by using deep learning approach and multiple features combinations