Abstract:The advent of Internet technologies has resulted in the proliferation of electronic trading and the use of the Internet for electronic transactions, leading to a rise in unauthorized access to sensitive user information and the depletion of resources for enterprises. As a consequence, there has been a marked increase in phishing, which is now considered one of the most common types of online theft. Phishing attacks are typically directed towards obtaining confidential information, such as login credentials for online banking platforms and sensitive systems. The primary objective of such attacks is to acquire specific personal information to either use for financial gain or commit identity theft. Recent studies have been conducted to combat phishing attacks by examining domain characteristics such as website addresses, content on websites, and combinations of both approaches for the website and its source code. However, businesses require more effective anti-phishing technologies to identify phishing URLs and safeguard their users. The present research aims to evaluate the effectiveness of eight machine learning (ML) and deep learning (DL) algorithms, including support vector machine (SVM), k-nearest neighbors (KNN), random forest (RF), Decision Tree (DT), Extreme Gradient Boosting (XGBoost), logistic regression (LR), convolutional neural network (CNN), and DL model and assess their performances in identifying phishing. This study utilizes two real datasets, Mendeley and UCI, employing performance metrics such as accuracy, precision, recall, false positive rate (FPR), and F-1 score. Notably, CNN exhibits superior accuracy, emphasizing its efficacy. Contributions include using purpose-specific datasets, meticulous feature engineering, introducing SMOTE for class imbalance, incorporating the novel CNN model, and rigorous hyperparameter tuning. The study demonstrates consistent model performance across both datasets, highlighting stability and reliability.

Evaluation of Online Resources in Assisting Phishing Detection

Phishpedia: A Hybrid Deep Learning Based Approach to Visually Identify Phishing Webpages

HinPhish: an Effective Phishing Detection Approach Based on Heterogeneous Information Networks

An efficient multistage phishing website detection model based on the CASE feature framework: Aiming at the real web environment

Evaluating the Effectiveness and Robustness of Visual Similarity-based Phishing Detection Models

Intelligent Methods for Accurately Detecting Phishing Websites

An effective detection approach for phishing websites using URL and HTML features

Detecting Phishing sites Without Visiting them

A Survey of Machine Learning-Based Solutions for Phishing Website Detection

Phishing-Alarm: Robust and Efficient Phishing Detection Via Page Component Similarity

A Sophisticated Framework for the Accurate Detection of Phishing Websites

Protect sensitive sites from phishing attacks using features extractable from inaccessible phishing URLs

Comparative evaluation of machine learning algorithms for phishing site detection

Automated Phishing Detection Using URLs and Webpages

Web Phishing Detection Based On Page Spatial Layout Similarity

AI Meta-Learners and Extra-Trees Algorithm for the Detection of Phishing Websites

A Systematic Literature Review on Phishing Website Detection Techniques

The applicability of a hybrid framework for automated phishing detection

A comprehensive survey of AI-enabled phishing attacks detection techniques

Detecting Phishing Websites Via Aggregation Analysis of Page Layouts

Phishing Page Detection Via Learning Classifiers from Page Layout Feature