Spear-Phishing Emails Verification Method based on Verifiable Secret Sharing Scheme

Phishing is a critical cybersecurity issue that differs from other attacks. This attack practices social engineering techniques to prompt users to disclose their credentials. Spear phishing is an advanced version of phishing attacks where the attacker investigates the online behavior of an individual or organization to gather the information for constructing an email that appears to be legitimate. As a result, spear-phishing holds a high success rate than traditional phishing emails since these emails can evade the standard security barriers and harvest the credentials. This paper presents an abstract method that collects features from different dimensions: phishing domain features, stylometric features, and others to detect spear-phishing emails. The auto-upgrade profile is additionally supplemented by the method to detect phishing emails within a second. Finally, the method employs a machine-learning algorithm to classify spear-phishing emails from legitimate emails. This paper owns the uniqueness of detecting traditional phishing emails as well as spear-phishing emails using multi-dimensional features. Finally, this paper applied the publicly verifiable secret sharing to verify the email whether the sender is genuine or not.