A Machine Learning Approach for Phishing Attack Detection  

作　　者：Tarun Choudhary Siddhesh Mhapankar Rohit Bhddha Ashish Kharuk Rohini Patil 

机构地区：[1]Terna Engineering College,Nerul,Navi Mumbai,India

出　　处：《Journal of Artificial Intelligence and Technology》2023年第3期108-113,共6页人工智能技术学报（英文）

摘　　要：Phishing is the easiest method for gathering sensitive information from unwary people.Phishers seek to get private data including passwords,login information,and bank account details.Cyber security experts are actively seeking for trustworthy and effective ways to identify phishing websites.In order to distinguish between legal and phishing URLs,we used machine learning(ML)technology.In this research work,using ML technology extraction and analysis of both types of URLs was performed.Extreme Gradient Boosting,Decision Tree,Logistic Regression,Random Forest(RF),and Support Vector Machine were used to identify phishing websites.The goal was to identify phishing URLs and determine the most effective ML technique by comparing the accuracy rates of each algorithm.In this,proposed methodology two datasets were used.The accuracy of models was calculated on PhishTank and UCI dataset using K-fold,feature selection and hyperparameter tuning method.Performance measures precision,recall,F1-score,and receiver operating characteristics(ROC)curve were calculated.RF provided an accuracy of 98.80% and 97.87% on the PhishTank dataset and UCI,respectively.Highest precision,recall,and F1-score value were 99% each,and AUC-ROC value was 99.89% with PhishTank dataset.Validation with other researchers showed better results with proposed methodology.Therefore,this methodology can be of help to identify phishing websites.

关 键 词：legitimate machine learning MALICIOUS PHISHING URL WEBSITE 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]