Abstract:Web applications are important for various online businesses and operations because of their platform stability and low operation cost. The increasing usage of Internet-of-Things (IoT) devices within a network has contributed to the rise of network intrusion issues due to malicious Uniform Resource Locators (URLs). Generally, malicious URLs are initiated to promote scams, attacks, and frauds which can lead to high-risk intrusion. Several methods have been developed to detect malicious URLs in previous works. There has been a good amount of work done to detect malicious URLs using various methods such as random forest, regression, LightGBM, and more as reported in the literature. However, most of the previous works focused on the binary classification of malicious URLs and are tested on limited URL datasets. Nevertheless, the detection of malicious URLs remains a challenging task that remains open to research. Hence, this work proposed a stacking-based ensemble classifier to perform multi-class classification of malicious URLs on larger URL datasets to justify the robustness of the proposed method. This study focuses on obtaining lexical features directly from the URL to identify malicious websites. Then, the proposed stacking-based ensemble classifier is developed by integrating Random Forest, XGBoost, LightGBM, and CatBoost. In addition, hyperparameter tuning was performed using the Randomized Search method to optimize the proposed classifier. The proposed stacking-based ensemble classifier aims to take advantage of the performance of each machine learning model and aggregate the output to improve prediction accuracy. The classification accuracies of the machine learning model when applied individually are 93.6%, 95.2%, 95.7% and 94.8% for random forest, XGBoost, LightGBM, and CatBoost respectively. The proposed stacking-based ensemble classifier has shown significant results in classifying four classes of malicious URLs (phishing, malware, defacement, and benign) with an average accuracy of 96.8% when benchmarked with previous works.

A stacking model using URL and HTML features for phishing webpage detection

AntiPhishStack: LSTM-Based Stacked Generalization Model for Optimized Phishing URL Detection

An effective detection approach for phishing websites using URL and HTML features

An efficient multistage phishing website detection model based on the CASE feature framework: Aiming at the real web environment

A hybrid DNN-LSTM model for detecting phishing URLs

Phishpedia: A Hybrid Deep Learning Based Approach to Visually Identify Phishing Webpages

Phishing Website Detection through Multi-Model Analysis of HTML Content

Phishing Webpage Detection via Multi-Modal Integration of HTML DOM Graphs and URL Features Based on Graph Convolutional and Transformer Networks

Light gradient boosting machine-based phishing webpage detection model using phisher website features of mimic URLs

PDHF: Effective phishing detection model combining optimal artificial and automatic deep features

A Sophisticated Framework for the Accurate Detection of Phishing Websites

Protect sensitive sites from phishing attacks using features extractable from inaccessible phishing URLs

Enhancing phishing email detection with stylometric features and classifier stacking

PhishingRTDS: A Real-time Detection System for Phishing Attacks Using a Deep Learning Model

HTMLPhish: Enabling Phishing Web Page Detection by Applying Deep Learning Techniques on HTML Analysis

An ensemble classification method based on machine learning models for malicious Uniform Resource Locators (URL)

Mitigating Bias in Machine Learning Models for Phishing Webpage Detection

Comparative Study of CatBoost, XGBoost, and LightGBM for Enhanced URL Phishing Detection: A Performance Assessment

Enhancing Phishing Detection through Feature Importance Analysis and Explainable AI: A Comparative Study of CatBoost, XGBoost, and EBM Models

URL based phishing attack detection using BiLSTM-gated highway attention block convolutional neural network