Abstract:The use of artificial intelligence (AI) to detect phishing emails is primarily dependent on large-scale centralized datasets, which has opened it up to a myriad of privacy, trust, and legal issues. Moreover, organizations have been loath to share emails, given the risk of leaking commercially sensitive information. Consequently, it has been difficult to obtain sufficient emails to train a global AI model efficiently. Accordingly, privacy-preserving distributed and collaborative machine learning, particularly federated learning (FL), is a desideratum. As it is already prevalent in the healthcare sector, questions remain regarding the effectiveness and efficacy of FL-based phishing detection within the context of multi-organization collaborations. To the best of our knowledge, the work herein was the first to investigate the use of FL in phishing email detection. This study focused on building upon a deep neural network model, particularly recurrent convolutional neural network (RNN) and bidirectional encoder representations from transformers (BERT), for phishing email detection. We analyzed the FL-entangled learning performance in various settings, including (i) a balanced and asymmetrical data distribution among organizations and (ii) scalability. Our results corroborated the comparable performance statistics of FL in phishing email detection to centralized learning for balanced datasets and low organizational counts. Moreover, we observed a variation in performance when increasing the organizational counts. For a fixed total email dataset, the global RNN-based model had a 1.8% accuracy decrease when the organizational counts were increased from 2 to 10. In contrast, BERT accuracy increased by 0.6% when increasing organizational counts from 2 to 5. However, if we increased the overall email dataset by introducing new organizations in the FL framework, the organizational level performance improved by achieving a faster convergence speed. In addition, FL suffered in its overall global model performance due to highly unstable outputs if the email dataset distribution was highly asymmetric.

Email security level classification of imbalanced data using artificial neural network: The real case in a world-leading enterprise

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

On effective e-mail classification via neural networks

Combining Neural Networks and Semantic Feature Space for Email Classification

Cloud-based email phishing attack using machine and deep learning algorithm

Email Classification into Relevant Category Using Neural Networks

Improving malicious email detection through novel designated deep-learning architectures utilizing entire email

Anomaly Detection in Emails using Machine Learning and Header Information

An Advanced Deep Attention Collaborative Mechanism for Secure Educational Email Services

Phishing email detection using deep learning algorithms

A Collaborative Learning Technique for Improved Email Security

Sensitive Data Detection with High-Throughput Neural Network Models for Financial Institutions

Phishing Email Detection Using Improved RCNN Model With Multilevel Vectors and Attention Mechanism

Email Classification Using Behavior and Time Features

Imbalanced data classification: A KNN and generative adversarial networks-based hybrid approach for intrusion detection

Evaluation of Enterprise Financial Risk Level under Digital Transformation with Artificial Neural Network

Evaluation of Federated Learning in Phishing Email Detection

Double-layer Detection of Internal Threat in Enterprise Systems Based on Deep Learning

Intelligent Deep Learning Based Cybersecurity Phishing Email Detection and Classification

Semantic Graph Based Convolutional Neural Network for Spam e-mail Classification in Cybercrime Applications

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network