The widespread use of internet technologies is limited because people are worried about cybersecurity. With phishing, cyber criminals pose as reputable entities to trick users and access important information. Standard detection approaches are difficult to follow along with the constantly changing strategies of cybercriminals. A new phishing attack detection framework is presented in this research, using the Gated Recurrent Unit (GRU) Artificial Intelligence (AI) model. Labels have been added to the Uniform Resource Locators (URLs) in the PhishTank dataset, so the model learns what is phishing and what is not. A good data preprocessing method involving feature extraction, dealing with missing data, and running outlier detection checks is applied to maintain high data quality. The performance of the GRU model is outstanding, reaching 98.01% accuracy, F1-score of 98.14%, 98.41% recall, as well as 98.67% precision, better than that of classical Machine Learning (ML) methods, including Adaptive Boosting (AdaBoost) and Long Short-Term Memory (LSTM). The proposed approach correctly handles dependencies among elements in a URL, resulting in a strong method for detecting phishing pages. Results from experiments verify the model’s potential in accurately identifying phishing attacks, offering significant advancements in cybersecurity defense systems.
References
[1]
Basnet, R., Mukkamala, S. and Sung, A.H. (2008) Detection of Phishing Attacks: A Machine Learning Approach. In: Prasad, B., Ed., Soft Computing Applications in Industry, Springer, 373-383. https://doi.org/10.1007/978-3-540-77465-5_19
[2]
Hajgude, J. and Ragha, L. (2012) “Phish Mail Guard: Phishing Mail Detection Technique by Using Textual and URL Analysis”. 2012 World Congress on Information and Communication Technologies, Trivandrum, 30 October 2012-2 November 2012, 297-302. https://doi.org/10.1109/wict.2012.6409092
[3]
Chandra, J.V., Challa, D.N. and Pasupuleti, D.S.K. (2019) Machine Learning Framework to Analyze against Spear Phishing. International Journal of Innovative Technology and Exploring Engineering, 8, 3605-3611. https://doi.org/10.35940/ijitee.l3802.1081219
[4]
Kolluri, V. (2016) A Pioneering Approach to Forensic Insights: Utilization AI for Cyber-Security Incident Investigations. International Journal of Research and Analytical Reviews, 3, 919-922.
[5]
Apruzzese, G., Colajanni, M., Ferretti, L., Guido, A. and Marchetti, M. (2018) On the Effectiveness of Machine and Deep Learning for Cyber Security. 2018 10th International Conference on Cyber Conflict (CyCon), Tallinn, 29 May 2018-1 June 2018, 371-390. https://doi.org/10.23919/cycon.2018.8405026
[6]
Yazhmozhi, V.M. and Janet, B. (2019) Natural Language Processing and Machine Learning Based Phishing Website Detection System. 2019 Third International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC), Palladam, 12-14 December 2019, 336-340. https://doi.org/10.1109/i-smac47947.2019.9032492
[7]
Wang, W., Zhang, F., Luo, X. and Zhang, S. (2019) PDRCNN: Precise Phishing Detection with Recurrent Convolutional Neural Networks. Security and Communication Networks, 2019, Article ID: 2595794. https://doi.org/10.1155/2019/2595794
[8]
Nugraha, A.F. and Rahman, L. (2019) Meta-Algorithms for Improving Classification Performance in the Web-Phishing Detection Process. 2019 4th International Conference on Information Technology, Information Systems and Electrical Engineering (ICITISEE), Yogyakarta, 20-21 November 2019, 271-275. https://doi.org/10.1109/icitisee48480.2019.9003952
[9]
Le Page, S. and Jourdan, G. (2019) Victim or Attacker? A Multi-Dataset Domain Classification of Phishing Attacks. 2019 17th International Conference on Privacy, Security and Trust (PST), Fredericton, 26-28 August 2019, 1-10. https://doi.org/10.1109/pst47121.2019.8949038
[10]
Sönmez, Y., Tuncer, T., Gökal, H. and Avcı, E. (2018) Phishing Web Sites Features Classification Based on Extreme Learning Machine. 2018 6th International Symposium on Digital Forensic and Security (ISDFS), Antalya, 22-25 March 2018, 1-5. https://doi.org/10.1109/isdfs.2018.8355342
[11]
Hota, H.S., Shrivas, A.K. and Hota, R. (2018) An Ensemble Model for Detecting Phishing Attack with Proposed Remove-Replace Feature Selection Technique. Procedia Computer Science, 132, 900-907. https://doi.org/10.1016/j.procs.2018.05.103
[12]
Subasi, A., Molah, E., Almkallawi, F. and Chaudhery, T.J. (2017) Intelligent Phishing Website Detection Using Random Forest Classifier. 2017 International Conference on Electrical and Computing Technologies and Applications (ICECTA), Ras Al Khaimah, 21-23 November 2017, 1-5. https://doi.org/10.1109/icecta.2017.8252051
[13]
Cho, K., van Merrienboer, B., Gulcehre, C., Bahdanau, D., Bougares, F., Schwenk, H., et al. (2014) Learning Phrase Representations Using RNN Encoder-Decoder for Statistical Machine Translation. Proceedings of the 2014 Conference on Empirical Methods in Natural Language Processing (EMNLP), Doha, 25-29 October 2014, 1724-1734. https://doi.org/10.3115/v1/D14-1179
[14]
Xiang, G., Hong, J., Rose, C.P. and Cranor, L. (2011) CANTINA+: A Feature-Rich Machine Learning Framework for Detecting Phishing Web Sites. ACM Transactions on Information and System Security, 14, 1-28. https://doi.org/10.1145/2019599.2019606
[15]
Sahingoz, O.K., Buber, E., Demir, O. and Diri, B. (2019) Machine Learning Based Phishing Detection from URLs. Expert Systems with Applications, 117, 345-357. https://doi.org/10.1016/j.eswa.2018.09.029
[16]
Ren, F., Jiang, Z. and Liu, J. (2019) A Bi-Directional LSTM Model with Attention for Malicious URL Detection. 2019 IEEE 4th Advanced Information Technology, Electronic and Automation Control Conference (IAEAC), Chengdu, 20-22 December 2019, 300-305. https://doi.org/10.1109/iaeac47372.2019.8997947
