A Hybrid Phishing Detection System Using Deep Learning-based URL and Content Analysis

• Published in: Elektronika ir elektrotechnika Vol. 28; no. 5; pp. 80 - 89
• Main Authors: Korkmaz, Mehmet, Kocyigit, Emre, Sahingoz, Ozgur Koray, Diri, Banu
• Format: Journal Article
• Language: English
• Published: Kaunas University of Technology, Faculty of Telecommunications and Electronics 01.01.2022
• Subjects: Data security; Internet; Machine learning; Methods; Phishing; Prevention; Safety and security measures; Turkey
• ISSN: 1392-1215; 2029-5731
• DOI: 10.5755/j02.eie.31197

Phishing attacks are one of the most preferred types of attacks for cybercriminals, who can easily contact a large number of victims through the use of social networks, particularly through email messages. To protect end users, most of the security mechanisms control Uniform Resource Locator (URL) addresses because of their simplicity of implementation and execution speed. However, due to sophisticated attackers, this mechanism can miss some phishing attacks and has a relatively high false positive rate. In this research, a hybrid technique is proposed that uses not only URL features, but also content-based features as the second level of detection mechanism, thus improving the accuracy of the detection system while also minimizing the number of false positives. Additionally, most phishing detection algorithms use datasets that contain easily differentiated data pieces, either phishing or legitimate. However, in order to implement a more secure protection mechanism, we aimed to collect a larger and high-risk dataset. The proposed approaches were tested on this High-Risk URL and Content-Based Phishing Detection Dataset that only contains suspicious websites from PhishTank. According to experimental studies, an accuracy rate of 98.37 percent was achieved on a more realistic dataset for phishing detection.