Phishing URL Detection Using Supervised Machine Learning Algorithms

Usman Gabriel Ugbede, Sunusi Kabir Alaramma, Muhammad Abubakar Ibrahim, Adamu Adamu Habu

Abstract


Phishing is one of the security threats that has been in existence for the past decades. It is the process of tricking unsuspecting users with the aid of baits such as URL (Uniform Resource Locator) links to lure victims from a secured platform to an unsecure platform with the intent of stealing valuable information such as credit card details, bank token, and identity etc. Many researchers have developed several methods to combat these threats although been effective, it has failed to combat the increasing adaptive ability of the phishers who attack unsuspecting victims in recent times.  In this study therefore, we propose an adaptive data collection system for use in the automatic detection of phishing URL. An adaptive data collection system for legitimate and phishing URL based on certain selected features will be used in the extraction of features using a structured feature extraction vector model which will be trained and tested using five (5) classification models built from Random Forest, Decision Tree, XGboost, Adaboost and KNN. The results obtained from the five models show that model from Random Forest outperforms the other models from other classifiers with an accuracy of 99.38%, precision of 90.21% and a recall rate of 82.55%. The model developed from the random forest classifier was then selected and deployed on a phishing detection platform developed. In the future we seek to expand the features and also seek to explore the usage of deep neural network as the features keeps expanding.


Full Text:

PDF

References


APWG (2022) phishing activity trends report, 4th quarter 2022, tech rep, pp3-5 retrieved from http://www.apwg.org/

Aljofey, A, Jiang Q, Qu Q, Huang M, Niyigena JP (2020). An effective phishing detection model based on character level convolutional neural network from URL. Electronics. Sep; 9(9):1514.

Athulya, A. A, (2020) Towards the Detection of Phishing Attacks, 4th International Conference on Trends in Electronics and Informatics (ICOEI) (48184), Tirunelveli, India pp.337343,doi:10.1109/ICOEI48184.2020.9142967.

Bahnsen, et al. (2018), How to Detect Phishing Website Using Three Model Ensemble Classification, 4th International Conference on Trends in Electronics and Informatics (ICOEI) (48184), Tirunelveli, India.

Chidimma, et al (2020), HTML Phish: Enabling phishing web page detection by applying deep learning techniques on HTML analysis. 19(3) https://doi.org/1909.01135v3

Dutta, K, (2021), Detecting phishing websites using machine learning technique.16 (10): e0258361 16(10). https://doi.org/10.1371/journal.pone.0258361

Jain, A. K. and Gupta, B. B. (2018), PHISH-SAFE: URL Features-Based Phishing Detection System Using Machine Learning, Cyber Security. Advances in Intelligent Systems and Computing, vol. 729, Doi: 10.1007/978-981-108536-9_44.

Janson, K, & Von S. R. (2011), Phishing for phishing awareness. 32(10) https://doi.org/10.1080/0144929X.2011.632650.

Rishikesh, Mahajan and Irfan Siddavatam (2018) “Phishing website detection using machine learning” International Journal of Computer Applications (0975 – 8887) Volume 181.


Refbacks

  • There are currently no refbacks.