Abstract:The use of artificial intelligence (AI) to detect phishing emails is primarily dependent on large-scale centralized datasets, which has opened it up to a myriad of privacy, trust, and legal issues. Moreover, organizations have been loath to share emails, given the risk of leaking commercially sensitive information. Consequently, it has been difficult to obtain sufficient emails to train a global AI model efficiently. Accordingly, privacy-preserving distributed and collaborative machine learning, particularly federated learning (FL), is a desideratum. As it is already prevalent in the healthcare sector, questions remain regarding the effectiveness and efficacy of FL-based phishing detection within the context of multi-organization collaborations. To the best of our knowledge, the work herein was the first to investigate the use of FL in phishing email detection. This study focused on building upon a deep neural network model, particularly recurrent convolutional neural network (RNN) and bidirectional encoder representations from transformers (BERT), for phishing email detection. We analyzed the FL-entangled learning performance in various settings, including (i) a balanced and asymmetrical data distribution among organizations and (ii) scalability. Our results corroborated the comparable performance statistics of FL in phishing email detection to centralized learning for balanced datasets and low organizational counts. Moreover, we observed a variation in performance when increasing the organizational counts. For a fixed total email dataset, the global RNN-based model had a 1.8% accuracy decrease when the organizational counts were increased from 2 to 10. In contrast, BERT accuracy increased by 0.6% when increasing organizational counts from 2 to 5. However, if we increased the overall email dataset by introducing new organizations in the FL framework, the organizational level performance improved by achieving a faster convergence speed. In addition, FL suffered in its overall global model performance due to highly unstable outputs if the email dataset distribution was highly asymmetric.

Federated Phish Bowl: LSTM-Based Decentralized Phishing Email Detection

STFN: Spatio-Temporal Fusion Network to Detect Ethereum Phishing Scams

Evaluation of Federated Learning in Phishing Email Detection

Exploring the Efficacy of Federated-Continual Learning Nodes with Attention-Based Classifier for Robust Web Phishing Detection: An Empirical Investigation

Phishing email detection using deep learning algorithms

Phishpedia: A Hybrid Deep Learning Based Approach to Visually Identify Phishing Webpages

Next-Generation Phishing: How LLM Agents Empower Cyber Attackers

AntiPhishStack: LSTM-based Stacked Generalization Model for Optimized Phishing URL Detection

Phishing Email Detection Model Using Deep Learning

A hybrid DNN-LSTM model for detecting phishing URLs

PhishIntel: Toward Practical Deployment of Reference-based Phishing Detection

SecureNet: A Comparative Study of DeBERTa and Large Language Models for Phishing Detection

Intelligent Deep Learning Based Cybersecurity Phishing Email Detection and Classification

Automated Phishing Detection Using URLs and Webpages

An ensemble learning approach for detecting phishing URLs in encrypted TLS traffic

Phishing Attacks Detection -- A Machine Learning-Based Approach

ChatSpamDetector: Leveraging Large Language Models for Effective Phishing Email Detection

An Innovative Information Theory-based Approach to Tackle and Enhance The Transparency in Phishing Detection

Large Language Model Lateral Spear Phishing: A Comparative Study in Large-Scale Organizational Settings

Towards a Multi-Layered Phishing Detection