Deep learning based phishing website identification system using CNN-LSTM classifier

Sapkal, Vinod; Gupta, Praveen; Khan, Aboo Bakar

doi:10.47974/JIOS-1343

Open Access Research Article

Deep learning based phishing website identification system using CNN-LSTM classifier

^*Vinod SapkalCorresponding authorvinod180129@csmu.ac.inDepartment of Computer Science and Engineering CSMU, Navi MumbaiPanvel, Maharashtra, IndiaView full profile → , Praveen Guptapraveengupta@csmu.ac.inDepartment of Computer Science and Information Technology CSMU, Navi MumbaiPanvel, Maharashtra, IndiaView full profile → , Aboo Bakar Khanaboobakarkhan@csmu.ac.inDepartment of Electrical and Electronics Engineering CSMU, Navi MumbaiPanvel, Maharashtra, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 315–330Vol. 44Issue 3April 2023DOI: 10.47974/JIOS-1343XML

Published Online:: 31 Mar 2023
Article type:: Research Article
Language:: EN
Article no.:: JIOS-1343
Pages:: 315–330

Abstract

The term phishing refers to an attack that pretends to be the website of a large corporation, typically one dealing with money, such as a bank or other financial institution or an online retailer. Its primary objective is to acquire personally identifiable information from users, such as their social security numbers, credit card information, and passwords. Due to the rise of phishing attacks, various techniques have been developed in order to combat these threats. One of these is deep learning algorithms, which are capable of learning and analyzing massive datasets. Due to their capabilities, these algorithms are very useful in identifying and preventing phishing attacks. Due to the complexity of the phishing websites, many development systems have been created to detect them. Unfortunately, the output that was desired cannot be achieved by these systems, and they have a number of other flaws as well. The purpose of this paper is to propose a hybrid deep learning-based phishing detection system that is easy to put into practice. The quality of the input dataset is improved through the process of preprocessing the dataset. After that, the procedures of clustering and feature selection are carried out in order to improve the accuracy and decrease the amount of time required for the processing. The resulting features are then fed into the CNN_LSTM, which is a classification system that classifies websites that are phishing and legitimate. Proposed Hybrid deep learning models are proposed to combine the features of natural language processing (NLP) and character embedding. They can then reveal high-level connections between characters. In terms of the metric that is being used for the evaluation, the performance of the models that have been proposed is better than that of the other models.

Keywords

Phishing CNN LSTM NLP

Subject Classifications

68T07 Artificial neural networks and deep learning68T27 Logic in artificial intelligence68T45 Machine vision and scene understanding

References

[1] A. K. Jain and B. B. Gupta, “A machine learning based approach for phishing detection using hyperlinks information,” J. Ambient Intell. Humaniz. Comput., vol. 10, no. 5, pp. 2015-2028 (2019), doi: 10.1007/s12652-018-0798-z.[2] A. Ozcan, C. Catal, E. Donmez, and B. Senturk, “A hybrid DNN–LSTM model for detecting phishing URLs,” Neural Comput. Appl., vol. 0123456789 (2021), doi: 10.1007/s00521-021-06401-z.[3] A. V. Ramana, K. L. Rao, and R. S. Rao, “Stop-Phish: an intelligent phishing detection method using feature selection ensemble,” Soc. Netw. Anal. Min., vol. 11, no. 1, pp. 1-9 (2021), doi: 10.1007/s13278-021-00829-w.[4] B. B. Gupta, A. Tewari, A. K. Jain, and D. P. Agrawal, “Fighting against phishing attacks: state of the art and future challenges,” Neural Comput. Appl., vol. 28, no. 12, pp. 3629-3654 (2017), doi: 10.1007/s00521-016-2275-y.[5] https://wearesocial.com/uk/blog/2021/01/digital-2021-the-latest-insights-into-the-state-of-digital/” .[6] J. Anitha and M. Kalaiarasu, “A new hybrid deep learning-based phishing detection system using MCS-DNN classifier,” Neural Comput. Appl., vol. 34, no. 8, pp. 5867-5882 (2022), doi: 10.1007/s00521-021-06717-w.[7] L. Lakshmi, M. P. Reddy, C. Santhaiah, and U. J. Reddy, “Smart Phishing Detection in Web Pages using Supervised Deep Learning Classification and Optimization Technique ADAM,” Wirel. Pers. Commun., vol. 118, no. 4, pp. 3549–3564 (2021), doi: 10.1007/s11277-021-08196-7.[8] M. G. Hr, A. Mv, S. Gunesh Prasad, and S. Vinay, “Development of anti-phishing browser based on random forest and rule of extraction framework,” Cybersecurity, vol. 3, no. 1, pp. 1-14 (2020), doi: 10.1186/s42400-020-00059-1.[9] M. Somesha, A. R. Pais, R. S. Rao, and V. S. Rathour, “Efficient deep learning techniques for the detection of phishing websites,” Sadhana - Acad. Proc. Eng. Sci., vol. 45, no. 1, pp. 1-18 (2020), doi: 10.1007/s12046-020-01392-4.[10] R. S. Rao and A. R. Pais, “Detection of phishing websites using an efficient feature-based machine learning framework,” Neural Comput. Appl., vol. 31, no. 8, pp. 3851-3873 (2019), doi: 10.1007/s00521-017-3305-0.[11] R. S. Rao and A. R. Pais, “Two level filtering mechanism to detect phishing sites using lightweight visual similarity approach,” J. Ambient Intell. Humaniz. Comput., vol. 11, no. 9, pp. 3853-3872 (2020), doi: 10.1007/s12652-019-01637-z.[12] S. Anupam and A. K. Kar, “Phishing website detection using support vector machines and nature-inspired optimization algorithms,” Telecommun. Syst., vol. 76, no. 1, pp. 17-32 (2021), doi: 10.1007/s11235-020-00739-w.[13] S. Das Guptta, K. T. Shahriar, H. Alqahtani, D. Alsalman, and I. H. Sarker, “Modeling Hybrid Feature-Based Phishing Websites Detection Using Machine Learning Techniques,” Ann. Data Sci. (2022), doi: 10.1007/s40745-022-00379-8.[14] S. Jalil, M. Usman, and A. Fong, “Highly accurate phishing URL detection based on machine learning,” J. Ambient Intell. Humaniz. Comput., no. 0123456789 (2022), doi: 10.1007/s12652-022-04426-3.[15] S. Priya, S. Selvakumar, and R. L. Velusamy, “Evidential theoretic deep radial and probabilistic neural ensemble approach for detecting phishing attacks,” J. Ambient Intell. Humaniz. Comput., no. Kaspersky (2020, 2021), doi: 10.1007/s12652-021-03405-4.[16] U. A. Butt, R. Amin, H. Aldabbas, S. Mohan, B. Alouffi, and A. Ahmadian, “Cloud-based email phishing attack using machine and deep learning algorithm,” Complex Intell. Syst. (2022), doi: 10.1007/s40747-022-00760-3.[17] V. Sapkal and N. More, “An Improved Classification Model For Identifying The Phishing Attacks,” vol. 18, no. 6, pp. 7056-7062 (2021).[18] Amit Kumar Gupta, Pushpa Gothwal, Dinesh Goyal & Carlos M. Travieso-Gonzalez. IoT-Galvanized pandemic special E-Toilet for generation of sanitized environment, Journal of Discrete Mathematical Sciences and Cryptography (2022), DOI: 10.1080/09720529.2022.2068607.[19] Amit Kumar Gupta, Vijander Singh, Priya Mathur & Carlos M. Travieso-Gonzalez. Prediction of COVID-19 pandemic measuring criteria using support vector machine, prophet and linear regression models in Indian scenario, Journal of Interdisciplinary Mathematics, (2020), DOI: https://doi.org/10.1080/09720502.2020.1833458.[20] Jitendra Singh Yadav, Amit Kumar Gupta & Arjit Saxena. A review on gender identification using machine learning based on fingerprints, Journal of Information and Optimization Sciences, 40:5, 1121-1129 (2019), DOI: https://doi.org/10.1080/02522667.2019.1638002.

Views: 236Downloads: 10Citations: 0