Abstract:Purpose: Phishing is a significant cybercrime threat that affects individuals and organizations globally, including the banking industry in Kenya. The sophistication of phishing attacks continues to increase, and it is increasingly challenging traditional security measures to mitigate these threats. The purpose of this thesis is to build a framework for mitigating phishing e-mail attacks in the banking industry in Kenya using artificial intelligence. Phishing emails are among the most common techniques of cyber-attacks utilized by assailants to gain unauthorized access to sensitive information such as financial details, personal information, and login credentials. These attacks can have devastating effects on the victims, leading to financial loss, reputation damage, and even identity theft. Methodology: The framework development consists of four main stages: data collection, data preprocessing, model training, and deployment. In the data collection stage, a dataset of phishing and non-phishing emails is gathered from various sources such as public databases, dark web forums, and bank employees mail. In the data preprocessing stage, the collected data is cleaned, preprocessed, and labeled. In the model training stage, machine learning algorithms and NLP techniques is used to develop a robust phishing and non-phishing emails detection model. In the deployment stage, the model is integrated into the bank's email system to detect and block phishing emails in real-time. The framework is then evaluated using a dataset of phishing and non-phishing e-mails collected from the banking industry in Kenya. Various metrics such as accuracy, precision, recall, and F1-score are used to evaluate the framework. The framework is able to detect new phishing e-mails that were not previously included in the dataset, demonstrating its ability to adapt to new threats. Findings: The framework is based on a hybrid approach that combines machine learning algorithms, natural language processing (NLP) techniques, and human expertise that identify and prevent phishing emails from reaching their targets. The four main components of this framework include e-mail filtering, feature extraction, classification, and response. The e-mail filtering component uses several algorithms to identify and filter suspicious e-mails. The feature extraction component analyzes the content of the e-mail and extracts relevant features to help classify the e-mail as either legitimate or phishing. The classification component uses machine-learning algorithms to classify the e-mail as either legitimate or phishing. Finally, the response component takes appropriate action based on the classification results. Unique Contribution to Theory, Practice and Policy: The framework provides an effective way to identify and mitigate phishing e-mail attacks, reducing the risk of data breaches and financial losses.

AN OPTIMISED PHISHING EMAIL DETECTION AND PREVENTION USING CLASSIFICATION MODELS

A Classifier Model to Detect Phishing Emails Using Ensemble Technique

Phishing Attacks Detection -- A Machine Learning-Based Approach

Intelligent Deep Learning Based Cybersecurity Phishing Email Detection and Classification

Detecting Phishing Emails Using Random Forest and AdaBoost Classifier Model

An intelligent cyber security phishing detection system using deep learning techniques

Novel Interpretable and Robust Web-based AI Platform for Phishing Email Detection

Improving Phishing Email Detection Using the Hybrid Machine Learning Approach

Phishing Email Detection Model Using Deep Learning

Phishing email detection using deep learning algorithms

Intelligent Phishing Url Detection: A Solution Based on Deep Learning Framework

Framework for Mitigating Phishing E-mail in the Kenyan Banking Industry Using Artificial Intelligence (AI)

Intelligent Methods for Accurately Detecting Phishing Websites

Profiler: Profile-Based Model to Detect Phishing Emails

An investigation into the performances of the Current state-of-the-art Naive Bayes, Non-Bayesian and Deep Learning Based Classifier for Phishing Detection: A Survey

A Hybrid Approach for Alluring Ads Phishing Attack Detection Using Machine Learning

Detecting Phishing sites Without Visiting them

Using a Computational Cognitive Model to Understand Phishing Classification Decisions of Email Users

A Sophisticated Framework for the Accurate Detection of Phishing Websites

Analysis of the Performance Impact of Fine-Tuned Machine Learning Model for Phishing URL Detection

Applying machine learning and natural language processing to detect phishing email