The application of a novel neural network in the detection of phishing websites

被引:22
作者
Feng F. [1 ,2 ]
Zhou Q. [1 ]
Shen Z. [1 ]
Yang X. [1 ]
Han L. [1 ]
Wang J. [1 ]
机构
[1] School of Information Science and Engineering, Lanzhou University, Gansu, Lanzhou
[2] School of Electronic and Information Engineering, Lanzhou Institute of Technology, Gansu, Lanzhou
基金
中国国家自然科学基金;
关键词
Design risk minimization; Improved neural network; Phishing detection; Web security;
D O I
10.1007/s12652-018-0786-3
中图分类号
学科分类号
摘要
In recent years, security incidents of website occur increasingly frequently, and this motivates us to study websites’ security. Although there are many phishing detection approaches to detect phishing websites, the detection accuracy has not been desirable. In this paper, we propose a novel phishing detection model based on a novel neural network classification method. This detection model can achieve high accu-racy and has good generalization ability by design risk minimization principle. Furthermore, the training process of the novel detection model is simple and stable by Monte Carlo algorithm. Based on testing of a set of phishing and benign websites, we have noted that this novel phishing detection model achieves the best Accuracy, True-positive rate (TPR), False-positive rate (FPR), Precision, Recall, F-measure and Matthews Correlation Coefficient(MCC) comparable to other models as Naive Bayes (NB), Logistic Regression(LR), K-Nearest Neighbor (KNN), Decision Tree (DT), Linear Support Vector Machine (LSVM), Radial-Basis Support Vector Machine (RSVM) and Linear Discriminant Analysis (LDA). Furthermore, based upon experiments, we find that the proposed detection model can achieve a high Accuracy of 97.71% and a low FPR of 1.7%. It indicates that the proposed detection model is promising and can be effectively applied to phishing detection. © Springer-Verlag GmbH Germany, part of Springer Nature 2018.
引用
收藏
页码:1865 / 1879
页数:14
相关论文
共 50 条
[1]  
Abdelhamid N., Ayesh A., Thabtah F., Phishing detection based associative classification data mining, Expert Syst Appl, 41, 13, pp. 5948-5959, (2014)
[2]  
Global Phishing Survey: Domain Name Use and Trends in 2016
[3]  
Baslyman M., Chiasson S., “smells phishy”? An educational game about online phishing scams, Apwg Symposium on Electronic Crime Research, pp. 1-11, (2016)
[4]  
Cao Y., Han W., Le Y., Anti-phishing based on automated individual white-list, The Workshop on Digital Identity Management, pp. 51-60, (2008)
[5]  
Chang E.H., Kang L.C., Sze S.N., Wei K.T., Phishing detection via identification of website identity, International Conference on It Convergence and Security, pp. 1-4, (2013)
[6]  
Chen H., Zhao H., Shen J., Zhou R., Zhou Q., Supervised machine learning model for high dimensional gene data in colon cancer detection, IEEE International Congress on Big Data, pp. 134-141, (2015)
[7]  
Dhamija R., Tygar J.D., The battle against phishing: dynamic security skins, Symposium on Usable Privacy and Security, SOUPS 2005, pp. 77-88, (2005)
[8]  
Dunlop M., Groat S., Shelly D., Goldphish: Using images for content-based phishing analysis, International Conference on Internet Monitoring and Protection, pp. 123-128, (2010)
[9]  
El-Alfy E.S.M., Detection of phishing websites based on probabilistic neural networks and k-medoids clustering, Comput J, 60, 12, pp. 1745-1759, (2017)
[10]  
Gastellier-Prevost S., Granadillo G.G., Laurent M., Decisive heuristics to differentiate legitimate from phishing sites, Network and Information Systems Security, pp. 1-9, (2011)