A Deep Learning-Based Framework for Phishing Website Detection

Lizhen Tang

doi:10.1109/ACCESS.2021.3137636

Return

A Deep Learning-Based Framework for Phishing Website Detection

2022-01-01

Lizhen Tang *

Qusay H. Mahmoud

DOI：10.1109/ACCESS.2021.3137636

Original

Original request for help

Save

Abstract

En 中文

Phishing attackers spread phishing links through e-mail, text messages, and social media platforms. They use social engineering skills to trick users into visiting phishing websites and entering crucial personal information. In the end, the stolen personal information is used to defraud the trust of regular websites or financial institutions to obtain illegal benefits. With the development and applications of machine learning technology, many machine learning-based solutions for detecting phishing have been proposed. Some solutions are based on the features extracted by rules, and some of the features need to rely on third-party services, which will cause instability and time-consuming issues in the prediction service. In this paper, we propose a deep learning-based framework for detecting phishing websites. We have implemented the framework as a browser plug-in capable of determining whether there is a phishing risk in real-time when the user visits a web page and gives a warning message. The real-time prediction service combines multiple strategies to improve accuracy, reduce false alarm rates, and reduce calculation time, including whitelist filtering, blacklist interception, and machine learning (ML) prediction. In the ML prediction module, we compared multiple machine learning models using several datasets. From the experimental results, the RNN-GRU model obtained the highest accuracy of 99.18%, demonstrating the feasibility of the proposed solution.

Keywords:

Phishing

Real-time systems

Feature extraction

Browsers

Uniform resource locators

Biological system modeling

Predictive models

Phishing detection

machine learning

deep learning

RNN-GRU