Detecting Cloud-Based Phishing Attacks by Combining Deep Learning Models

2022-04-05 · Birendra Jha, Medha Atre, Ashwini Rao

Web-based phishing attacks nowadays exploit popular cloud web hosting services and apps such as Google Sites and Typeform for hosting their attacks. Since these attacks originate from reputable domains and IP addresses of the cloud services, traditional phishing detection methods such as IP reputation monitoring and blacklisting are not very effective. Here we investigate the effectiveness of deep learning models in detecting this class of cloud-based phishing attacks. Specifically, we evaluate deep learning models for three phishing detection methods--LSTM model for URL analysis, YOLOv2 model for logo analysis, and triplet network model for visual similarity analysis. We train the models using well-known datasets and test their performance on cloud-based phishing attacks in the wild. Our results qualitatively explain why the models succeed or fail. Furthermore, our results highlight how combining results from the individual models can improve the effectiveness of detecting cloud-based phishing attacks.

📄 PDF Abstract BibTeX arXiv:2204.02446

Code (0)

등록된 구현이 없습니다.

Tasks

Deep LearningTriplet

Methods 이 논문이 사용한 방법론

Average Pooling 설명 없음

Global Average Pooling Global Average Pooling is a pooling operation designed to replace fully connected layers in classical CNNs. The idea is to generate one feature map for each corresponding…

Max Pooling Max Pooling is a pooling operation that calculates the maximum value for patches of a feature map, and uses it to create a downsampled (pooled) feature map. It is usually…

Batch Normalization 설명 없음

1x1 Convolution A 1 x 1 Convolution is a convolution with some special properties in that it can be used for dimensionality reduction,…

Convolution A convolution is a type of matrix operation, consisting of a kernel, a small matrix of weights, that slides over input data performing element-wise multiplication with the…

Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…

Darknet-19 설명 없음

Detecting Phishing Sites -- An Overview

2021-03-23 · P. Kalaharsha, B. M. Mehtre

Phishing is one of the most severe cyber-attacks where researchers are interested to find a solution. In phishing, attackers lure end-users and steal their personal in-formation. To minimize the damage caused by phishing…

RAIDER: Reinforcement-aided Spear Phishing Detector

2021-05-17 · Keelan Evans, Alsharif Abuadbba, Tingmin Wu, Kristen Moore 외

Spear Phishing is a harmful cyber-attack facing business and individuals worldwide. Considerable research has been conducted recently into the use of Machine Learning (ML) techniques to detect spear-phishing emails. ML-b…

Binary Classification reinforcement-learning Reinforcement Learning (RL)

PhishLang: A Real-Time, Fully Client-Side Phishing Detection Framework Using MobileBERT

2024-08-11 · Sayak Saha Roy, Shirin Nilizadeh

In this paper, we introduce PhishLang, the first fully client-side anti-phishing framework built on a lightweight ensemble framework that utilizes advanced language models to analyze the contextual features of a website'…

Language Modelling Large Language Model Phishing Website Detection

Enhancing Phishing Email Identification with Large Language Models

2025-02-07 · Catherine Lee

Phishing has long been a common tactic used by cybercriminals and continues to pose a significant threat in today's digital world. When phishing attacks become more advanced and sophisticated, there is an increasing need…

EXPLICATE: Enhancing Phishing Detection through Explainable AI and LLM-Powered Interpretability

2025-03-22 · Bryan Lim, Roman Huerta, Alejandro Sotelo, Anthonie Quintela 외

Sophisticated phishing attacks have emerged as a major cybersecurity threat, becoming more common and difficult to prevent. Though machine learning techniques have shown promise in detecting phishing attacks, they functi…