Vol. 1 No. 1 (2023): International Journal of Information & Digital Security
Articles

A NEW INTELLIGENT MODEL FOR PHISHING WEB SITES DETECTION

PDF
  • Saad M. Almalki,
  • Nabih T. Abdelmajeed

Published 2023-12-26

Keywords

  • Neural Network,
  • Classification,
  • Incremental Learning,
  • Website Features

How to Cite

A NEW INTELLIGENT MODEL FOR PHISHING WEB SITES DETECTION. (2023). International Journal of Information & Digital Security, 1(1), 1-14. https://doi.org/10.54878/66f0v378

Abstract

In this paper, we propose a new version of neural network algorithm to enhance the accuracy of detecting website phishing attacks. The proposed algorithm is presented to update weights on multi layers network. The updated algorithm initially started by collecting and storing data in phishing website dataset. We compare the performance of neural network with several machine learning algorithms. The feature selection method applied by the improved neural network algorithms is effective for characteristic capturing with reasonable results. The neural network techniques involve innovative phishing detection model to extract the significant phishing features and patterns. The evaluation of the proposed method accuracy. Accuracy measures the phishing websites correctly detected as trusted websites among all instances. The main conclusion gained from this research is the effectiveness of neural network in detecting website phishing attacks. In addition, the incremental method used for combination of different datasets provided a good insight. We can conclude that the accuracy rate is dependent to the feature counts and dataset size. In addition, the proposed model helps to avoid loss of cumulative knowledge over time and even with the change of characteristics of phishing websites with respect to the designers and developers of these websites.

PDF

References

  1. J. Hong, The state of phishing attacks, Communications of the ACM 55 (1) (2012) 74–81.
  2. M. Imani, G. A. Montazer, Phishing website detection us- ing weighted feature line embedding, The ISC Interna- tional Journal of Information Security 9 (2) (2017) 49–61.
  3. Z. Futai, G. Yuxiang, P. Bei, P. Li, L. Linsen, Web Phish- ing detection based on graph mining, 2nd IEEE Interna- tional Conference on (2016) 1061–1066.
  4. R. M. Mohammad, F. Thabtah, L. Mccluskey, Predicting phishing websites using neural network trained with back- propagation, Proceedings on the International Conference on Artificial Intelligence (ICAI) (p. 1) (2013).
  5. C. J. Chandan, H. P. Chheda, D. M. Gosar, H. R. Shah, U. Bhave, A Machine Learning Approach for Detection of Phished Websites Using Neural Networks, International Journal on Recent and Innovation Trends in Computing and Communication (IJRITCC) (2) (2014) 12–12.
  6. Z. Zhang, Artificial neural network, in: Multivariate Time Series Analysis in Climate and Environmental Research, Springer, 2018, pp. 1–35.
  7. L. A. T. Nguyen, B. L. To, H. K. Nguyen, An Efficient Approach for Phishing Detection Using NeuroFuzzy Model, Journal of Automation and Control Engi- neering 3 (6) (2015).
  8. A. Almomani, T. C. Wan, A. Altaher, A. Manasrah, E. Al- momani, M. Anbar, . . Ramadass, S, Evolving fuzzy neural network for phishing emails detection, Journal of Computer Science 8 (7) (2012) 1099–1099. [9] Zhang, N., & Yuan, Y. (2013). Phishing detection using neural network. Department of Computer Science, Department of Statistics, Stanford University, CA, available at: http://cs229. stanford.edu/proj2012/ZhangYuanPhishingDetection UsingNeuralNetwork.pdf (accessed April 23, 2016).[Google Scholar]. [10] Martin, A., Anutthamaa, N., Sathyavathy, M., Francois, M. M. S., & Venkatesan, D. V. P. (2011). A framework for predicting phishing websites using neural networks. arXiv preprint arXiv:1109.1074.
  9. Kathirvalavakumar, T., Kavitha, K., & Palaniappan, R. (2015). Efficient Harmful Email Identification Using Neural Network. British Journal of Mathematics & Computer Science, 7(1), 58.
  10. Mohammad, R. M., Thabtah, F., & McCluskey, L. (2014). Predicting phishing websites based on selfstructuring neural network. Neural Computing and Applications, 25(2), 443-458.
  11. Fehringer, G., & Barraclough, P. A. (2017). Intelligent Security for Phishing Online using Adaptive Neuro Fuzzy Systems. INTERNATIONAL JOURNAL OF ADVANCED COMPUTER SCIENCE AND APPLICATIONS, 8(6), 1-10.
  12. Saxe, J., & Berlin, K. (2017). eXpose: A Character-Level Convolutional Neural Network with Embeddings For Detecting Malicious URLs, File Paths and Registry Keys. arXiv preprint arXiv:1702.08568.
  13. Kausar, F., Al-Otaibi, B., Al-Qadi, A., & AlDossari, N. (2014). Hybrid client side phishing websites detection approach. International Journal of Advanced Computer Science and Applications (IJACSA), 5(7), 132-140.
  14. Al-diabat, M. (2016). Detection and Prediction of Phishing Websites using Classification Mining Techniques. International Journal of Computer Applications, 147(5).
  15. Bahnsen, A. C., Bohorquez, E. C., Villegas, S., Vargas, J., & González, F. A. (2017). Classifying Phishing URLs Using Recurrent Neural Networks.
  16. Akinyelu, A. A., & Adewumi, A. O. (2014). Classification of phishing email using random forest machine learning technique. Journal of Applied Mathematics, 2014.
  17. Almomani, A., Gupta, B. B., Wan, T. C., Altaher, A., & Manickam, S. (2013). Phishing dynamic evolving neural fuzzy framework for online detection zero-day phishing email. arXiv preprint arXiv:1302.0629.
  18. Asudeh, O., & Wright, M. (2016, October). POSTER: Phishing Website Detection with a Multiphase Framework to Find Visual Similarity. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (pp. 1790-1792). ACM.
  19. Yasin, A., & Abuhasan, A. (2016). An intelligent classification model for phishing email detection. arXiv preprint arXiv:1608.02196.
  20. Sharma, A., Singh, P., & Kaur, A. (2015). Phishing Websites Detection Using Back Propagation Algorithm: A Review.
  21. Mohammad, R. M., Thabtah, F., & McCluskey, L. (2012, December). An assessment of features related to phishing websites using an automated technique. In Internet Technology And Secured Transactions, 2012 International Conference for (pp. 492-497). IEEE.
  22. Mohammad, R.M., Thabtah, F. & McCluskey, L., 2015-C. Phishing Websites Dataset. [Online] Available at: http://eprints.hud.ac.uk/24330/ [Accessed 14 October 2017].