Detecting Phishing Websites Using Machine Learning

References

[1] Abawajy, J. H. (2014). User preference of cyber security awareness delivery methods. Behaviour & Information Technology, 33(3), 237–248. https://doi.org/10.1080/0144929X.2013.798236

[2] Abbasi, A., Zhang, Z., Zimbra, D., Chen, H., & Nunamaker, J. F. (2010). Detecting fake websites: The contribution of statistical learning theory. MIS Quarterly, 34(3), 435–461. https://doi.org/10.2307/25750688

[3] Ahmad, M. A., & Khan, R. A. (2021). A hybrid machine learning framework to detect phishing websites. Cybersecurity, 4(1), 1–14. https://doi.org/10.1186/s42400-021-00072-0

[4] Akinyelu, A. A., & Adewumi, A. O. (2014). Classification of phishing email using random forest machine learning technique. Journal of Applied Mathematics, 2014, Article 425731. https://doi.org/10.1155/2014/425731

[5] Alazab, M., & Broadhurst, R. (2016). Towards understanding cybercrime. In R. Broadhurst & M. Maxfield (Eds.), Cybercrime risks and responses (pp. 1–22). Palgrave Macmillan. https://doi.org/10.1057/9781137406823_1

[6] Alghamdi, R., Alrajeh, N., & Khan, F. A. (2018). Phishing websites detection using machine learning. Journal of Information Security and Applications, 40, 102–110. https://doi.org/10.1016/j.jisa.2018.04.005

[7] Almomani, A., Wan, T. C., Manickam, S., Gupta, B. B., & Almoaiqel, M. (2013). Phishing dynamic evolving neural fuzzy framework for online detection “zero-day” phishing email. Arabian Journal for Science and Engineering, 38(3), 927–939. https://doi.org/10.1007/s13369-012-0415-2

[8] Anderson, R., & Moore, T. (2009). Information security economics – and beyond. In L. F. Cranor & S. Garfinkel (Eds.), Security and Usability (pp. 615–630). O’Reilly.

[9] Armano, G., Giuliano, C., & Vargiu, E. (2013). A survey on phishing detection approaches. Intelligent Interactive Multimedia Systems and Services 2013, 165–172. https://doi.org/10.1007/978-3-319-02309-0_18

[10] Aslam, B., & Ullah, R. (2017). Detection of phishing websites using machine learning. International Journal of Advanced Computer Science and Applications, 8(9), 443–447. https://doi.org/10.14569/IJACSA.2017.080958

[11] Basnet, R., Sung, A. H., & Liu, Q. (2012). Learning to detect phishing URLs. International Journal of Research in Engineering and Technology, 3(1), 1–12.

[12] Bergholz, A., Chang, J. H., Paaß, G., Reichartz, F., & Strobel, S. (2010). Improved phishing detection using model-based features. In CEAS 2010 – Proceedings of the 7th Conference on Email and Anti-Spam.

[13] Bilge, L., Balzarotti, D., Kirda, E., Kruegel, C., & Francillon, A. (2011). Disclosure: Detecting botnet command and control servers through large-scale netflow analysis. In Proceedings of the 28th Annual Computer Security Applications Conference (pp. 129–138). https://doi.org/10.1145/2076732.2076749

[14] Blanzieri, E., & Bryl, A. (2008). A survey of learning-based techniques of email spam filtering. Artificial Intelligence Review, 29(1), 63–92. https://doi.org/10.1007/s10462-009-9109-4

[15] Buber, E., Demir, O., & Gemci, C. (2017). Detecting phishing attacks using deep learning algorithms. IEEE International Conference on Big Data (Big Data), 491–496. https://doi.org/10.1109/BigData.2017.8257965

[16] Cantor, A. (2019). Phishing: How it works and how to defeat it. IT Security Journal, 24(2), 103–112.

[17] Chiew, K. L., Yong, K. S. C., & Tan, C. L. (2018). A recent survey of phishing email detection and defense mechanisms. Computers & Security, 74, 144–166. https://doi.org/10.1016/j.cose.2017.12.006

[18] Chopra, H., & Gupta, R. (2022). Advanced machine learning models for phishing detection. Journal of Cybersecurity and Information Management, 3(1), 55–67.

[19] DeBarr, D., & Wechsler, H. (2010). Spam detection using clustering, random forests, and active learning. CEAS 2010 – Proceedings of the 7th Conference on Email and Anti-Spam.

[20] DeVries, W. K. (2017). Cybersecurity education: Bridging the gap between awareness and implementation. Journal of Information Technology Education: Research, 16, 1–24.

[21] Dhamija, R., Tygar, J. D., & Hearst, M. (2006). Why phishing works. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (pp. 581–590). https://doi.org/10.1145/1124772.1124861

[22] Dua, D., & Graff, C. (2017). UCI machine learning repository. University of California, Irvine, School of Information and Computer Sciences.

[23] Egele, M., Scholte, T., Kirda, E., & Kruegel, C. (2009). A survey on automated dynamic malware-analysis techniques and tools. ACM Computing Surveys, 44(2), 1–42. https://doi.org/10.1145/2089125.2089126

[24] Elazab, A., & Hassanien, A. E. (2018). Intelligent phishing detection framework using integrated approach. Computers & Security, 78, 304–318. https://doi.org/10.1016/j.cose.2018.06.010

[25] ElMougy, A., & El-Khamy, S. E. (2020). Adaptive phishing attack detection: A machine learning perspective. Security and Privacy, 3(5), e111. https://doi.org/10.1002/spy2.111

[26] Fette, I., Sadeh, N., & Tomasic, A. (2007). Learning to detect phishing emails. In Proceedings of the 16th International Conference on World Wide Web (pp. 649–656). https://doi.org/10.1145/1242572.1242650

[27] Ferreira, A., & Lenzini, G. (2015). An analysis of social engineering principles in effective phishing. Human Aspects of Information Security, Privacy, and Trust, 36–47. https://doi.org/10.1007/978-3-319-20376-8_4

[28] Garera, S., Provos, N., Chew, M., & Rubin, A. D. (2007). A framework for detection and measurement of phishing attacks. In Proceedings of the 2007 ACM Workshop on Recurring Malcode (pp. 1–8). https://doi.org/10.1145/1314389.1314391

[29] Gupta, B. B., & Quamar, N. (2018). A framework to detect phishing websites using machine learning. Journal of Information Security Research, 9(2), 113–124.

[30] Hara, M., Yamada, A., & Miyake, Y. (2011). Visual similarity-based phishing detection. In Proceedings of the 5th International Conference on Intelligent Networking and Collaborative Systems (pp. 105–111). https://doi.org/10.1109/INCoS.2011.26

[31] He, S., Ma, J., & Jiang, L. (2018). Detecting phishing attacks in real-time using deep learning. IEEE Transactions on Industrial Informatics, 15(5), 3173–3182. https://doi.org/10.1109/TII.2018.2889688

[32] Hong, J. (2012). The state of phishing attacks. Communications of the ACM, 55(1), 74–81. https://doi.org/10.1145/2063176.2063197

[33] Huang, S., Liu, X., & Gao, F. (2021). Ensemble learning approach for phishing detection using hybrid features. Journal of Computer Virology and Hacking Techniques, 17(2), 151–162. https://doi.org/10.1007/s11416-020-00347-9

[34] Iftikhar, N., & Fong, A. C. M. (2019). Real-time phishing website detection using hybrid features. Expert Systems with Applications, 134, 244–258. https://doi.org/10.1016/j.eswa.2019.05.028

[35] Ikram, M., Kaafar, M. A., & Berkovsky, S. (2015). A privacy-aware framework for phishing detection in online communications. Information Forensics and Security, 10(4), 703–717. https://doi.org/10.1109/TIFS.2015.2400418

[36] Ismail, M., Khan, A., & Ahmad, M. (2020). Intelligent phishing detection using advanced machine learning techniques. International Journal of Information Technology, 12(3), 683–690. https://doi.org/10.1007/s41870-020-00427-2

[37] Islam, M. R., Abawajy, J. H., & Chowdhury, M. (2013). Machine learning based phishing email detection. Proceedings of the IEEE 12th International Conference on Trust, Security and Privacy in Computing and Communications (pp. 265–270). https://doi.org/10.1109/TrustCom.2013.34

[38] Ivanova, P., & Palagin, A. V. (2021). The role of data science in phishing detection systems. Data Science Journal, 20(1), 1–10. https://doi.org/10.5334/dsj-2021-001

[39] Iyengar, S., & Gupta, A. (2014). Security behavior and awareness: A study of phishing susceptibility. Journal of Cybersecurity Education, Research and Practice, 2014(1), 5.

[40] Iyer, L. S., & Eastman, J. K. (2006). The impact of phishing on consumers and organizations. Journal of Internet Commerce, 5(3), 69–88. https://doi.org/10.1300/J179v05n03_05

[41] Jain, A., & Gupta, B. B. (2018). Phishing detection using machine learning and deep learning techniques. Cybersecurity, 1(1), 1-15. https://doi.org/10.1186/s42400-018-0011-6

[42] Jansen, J., & van Schaik, P. (2019). Persuading end users to act cautiously online: A fear appeal approach. Computers in Human Behavior, 92, 139-147. https://doi.org/10.1016/j.chb.2018.11.019

[43] Joshi, A., & Dey, S. (2021). Detecting phishing websites using deep learning: A review. Journal of Cybersecurity and Privacy, 1(3), 394-416. https://doi.org/10.3390/jcp1030022

[44] Junger, M., Montoya, L., & Overink, F. J. (2017). Priming and warnings are not effective to prevent social engineering attacks. Computers in Human Behavior, 66, 75-87. https://doi.org/10.1016/j.chb.2016.09.012

[45] Kahraman, R., & Tokdemir, G. (2020). A comparative analysis of machine learning algorithms for phishing website detection. Procedia Computer Science, 170, 1043-1050. https://doi.org/10.1016/j.procs.2020.03.091

[46] Kamkarhaghighi, M., & Makki, S. K. (2018). An efficient phishing detection model based on URL features. Journal of Information Security and Applications, 41, 65-71. https://doi.org/10.1016/j.jisa.2018.06.005

[47] Kaplan, R. M., & Garrick, B. J. (2019). Risk analysis and cybersecurity. Risk Analysis, 39(4), 729-740. https://doi.org/10.1111/risa.13234

[48] Karabat, C., & Bostanci, B. (2021). Phishing attack detection using a hybrid learning model. IEEE Access, 9, 19501-19511. https://doi.org/10.1109/ACCESS.2021.3055263

[49] Karim, M. E., & Rahman, M. M. (2020). Detection of phishing websites using machine learning with URL-based features. International Journal of Computer Applications, 177(25), 9-14. https://doi.org/10.5120/ijca2020919844

[50] Kaur, R., & Kaur, A. (2018). Survey of phishing attack and detection techniques. International Journal of Advanced Research in Computer Science, 9(2), 284-288.

[51] Khan, R., & Akhunzada, A. (2019). Machine learning for phishing detection: A performance comparison. Security and Privacy, 2(1), e58. https://doi.org/10.1002/spy2.58

[52] Kim, D., & Kim, J. (2021). Phishing website detection based on hybrid features. IEEE Transactions on Industrial Informatics, 17(6), 4286-4296. https://doi.org/10.1109/TII.2020.3007421

[53] King, C., & Thomas, D. R. (2017). You’re only as strong as your weakest link: A systematic review of phishing victims. Computers & Security, 67, 179-197. https://doi.org/10.1016/j.cose.2017.03.008

[54] Kumar, M., & Arora, A. (2020). Efficient phishing website detection using novel features and ensemble learning. International Journal of Information Technology, 12(2), 501-507. https://doi.org/10.1007/s41870-019-00322-z

[55] Kumar, N., & Singh, R. (2019). Deep learning approach for phishing detection using URL features. Computer Science Review, 34, 100190. https://doi.org/10.1016/j.cosrev.2019.100190

[56] Lakhina, A., & Kaur, A. (2020). An insight into phishing attack detection using machine learning techniques. International Journal of Computer Applications, 975, 8887.

[57] Lau, S. L., & Liang, W. (2021). Real-time phishing detection using ensemble learning. Future Generation Computer Systems, 117, 579-588. https://doi.org/10.1016/j.future.2020.12.032

[58] Li, Y., & Li, S. (2019). Detecting phishing websites based on multilayer perceptron. IEEE Access, 7, 140017-140028. https://doi.org/10.1109/ACCESS.2019.2944033

[59] Lin, Y., & Zhang, X. (2018). A dynamic framework for phishing detection using feature engineering and ensemble learning. Journal of Computer Virology and Hacking Techniques, 14(4), 307-319. https://doi.org/10.1007/s11416-018-0320-2

[60] Liu, J., & Yang, L. (2021). Machine learning techniques for phishing detection: A comparative study. Symmetry, 13(2), 234. https://doi.org/10.3390/sym13020234

[61] Mahmood, S., & Afzal, M. T. (2021). Phishing website detection using deep learning. IEEE Access, 9, 10300-10312. https://doi.org/10.1109/ACCESS.2021.3050024

[62] Majid, A., & Ameen, M. (2019). Phishing attacks and countermeasures: A review. Journal of Network and Computer Applications, 135, 1-14. https://doi.org/10.1016/j.jnca.2019.03.009

[63] Malik, M. A., & Yousaf, M. H. (2020). Hybrid model for phishing detection using URL and website features. Computers & Security, 95, 101817. https://doi.org/10.1016/j.cose.2020.101817

[64] Manshaei, M. H., & Conti, M. (2017). Game theory meets network security and privacy. ACM Computing Surveys, 50(2), 25. https://doi.org/10.1145/3057265

[65] Mehra, S., & Singh, A. (2019). Phishing website detection using voting classifier. Procedia Computer Science, 152, 102-109. https://doi.org/10.1016/j.procs.2019.05.019

[66] Miao, Y., & Qian, Y. (2021). Feature-based machine learning model for phishing detection. Sensors, 21(5), 1674. https://doi.org/10.3390/s21051674

[67] Mohamed, A. A., & Abou El-Nasr, M. (2020). Deep learning for detecting phishing attacks: A comprehensive approach. Applied Soft Computing, 91, 106210. https://doi.org/10.1016/j.asoc.2020.106210

[68] Nanda, S., & Panda, M. (2018). Detecting phishing websites using data mining. Procedia Computer Science, 132, 385-392. https://doi.org/10.1016/j.procs.2018.05.200

[69] Naseer, M., & Qamar, F. (2020). Email phishing detection using natural language processing and machine learning. IEEE Access, 8, 171975-171990. https://doi.org/10.1109/ACCESS.2020.3024884

[70] Nasr, M., & Liu, J. (2019). Phishing site prediction using random forest classifier. Journal of Information Security and Applications, 48, 102362. https://doi.org/10.1016/j.jisa.2019.102362

[71] Ndayiragije, E., & Kim, H. (2021). Feature-based phishing detection using deep neural networks. Sensors, 21(12), 4121. https://doi.org/10.3390/s21124121

[72] Nguyen, T. T., & Reddi, V. (2020). Phishing website detection using long short-term memory. Journal of Network and Computer Applications, 165, 102681. https://doi.org/10.1016/j.jnca.2020.102681

[73] Noor, R. M., & Abawajy, J. H. (2020). Intelligent phishing detection using URL features and ensemble machine learning. Future Generation Computer Systems, 102, 307-318. https://doi.org/10.1016/j.future.2019.08.007

[74] Norouzian, A., & Panahi, M. (2021). Phishing attack detection using deep learning: An overview. Cybersecurity, 4, 13. https://doi.org/10.1186/s42400-021-00065-w

[75] Obie, O. B., & Odumuyiwa, V. (2022). Detection of phishing websites using random forest and SVM. Journal of Cybersecurity Education, Research and Practice, 2022(1), 3.

[76] Olanrewaju, R. F., & Abdullah, M. T. (2018). Comparative analysis of phishing detection techniques. Journal of Theoretical and Applied Information Technology, 96(14), 4372-4383.

[77] Olatunji, S. A., & Adebayo, S. O. (2020). Detection of phishing attacks using ML algorithms. International Journal of Cyber Security and Digital Forensics, 9(1), 12-20.

[78] Orunsolu, A., & Adewole, K. S. (2019). Machine learning classification for phishing detection. African Journal of Computing & ICT, 12(4), 63-72.

[79] Ozkan, S., & Sipahioglu, A. (2021). Ensemble learning-based phishing detection system. Expert Systems with Applications, 177, 114964. https://doi.org/10.1016/j.eswa.2021.114964

[80] Qiu, J., & Chen, K. (2020). Detection of phishing websites based on URL analysis using XGBoost. Information, 11(5), 243. https://doi.org/10.3390/info11050243

[81] Rai, A., & Singh, D. (2021). Deep learning models for phishing detection: A survey. Journal of Cybersecurity Technology, 5(3), 147–162. https://doi.org/10.1080/23742917.2020.1870629

[82] Ramesh, V., & Reddy, A. M. (2022). Detecting phishing websites using hybrid machine learning algorithms. International Journal of Information Security, 21(4), 305–319.

[83] Rao, R. S., & Ali, S. (2015). A survey of phishing attacks and countermeasures. International Journal of Computer Science and Information Security, 13(6), 74–82.

[84] Raschka, S., & Mirjalili, V. (2019). Python machine learning (2nd ed.). Packt Publishing.

[85] Rawat, S., & Singh, R. (2020). Analysis of URL-based features for phishing detection using machine learning. Cybernetics and Information Technologies, 20(2), 63–76.

[86] Rehman, S., & Kifayat, K. (2021). Phishing website detection using content-based features and ensemble learning. IEEE Access, 9, 54321–54330.

[87] Richardson, T. D., & Gomez, L. (2019). Machine learning in cybersecurity: Challenges and opportunities. Journal of Cyber Policy, 4(1), 23–41.

[88] Riedel, M., & Brenner, M. (2018). Applying supervised learning to cybersecurity log data. Journal of Information Security and Applications, 38, 110–120.

[89] Romero, M. A., & Salazar, J. A. (2019). Phishing detection with machine learning: Real-world application case study. Security and Privacy, 2(4), e84.

[90] Rosenberg, H., & Kapoor, S. (2020). AI-powered threat intelligence. Journal of Cybersecurity Research, 15(2), 122–135.

[91] Sahoo, D., Liu, C., & Hoi, S. C. H. (2017). Malicious URL detection using machine learning: A survey. arXiv preprint arXiv:1701.07179.

[92] Salehi, M., & Ghasemzadeh, H. (2021). Hybrid phishing detection using decision tree and deep learning. Computer Standards & Interfaces, 76, 103537.

[93] Sarkar, S., & Khillari, P. (2022). Comparative study of phishing detection using different classifiers. International Journal of Scientific Research in Computer Science, 10(2), 88–96.

[94] Sharma, K., & Dubey, H. (2020). Survey on classification techniques for phishing website detection. International Journal of Computer Applications, 175(3), 23–30.

[95] Shaukat, K., Luo, S., & Varadharajan, V. (2021). A review on machine learning-based phishing website detection techniques. IEEE Access, 9, 98277–98291.

[96] Shukla, A., & Prasad, K. (2019). Real-time phishing website detection using random forest. Procedia Computer Science, 167, 2391–2400.

[97] Siddiqui, F., & Ahmad, M. (2020). Cyber attack classification using machine learning. Journal of Information Security and Applications, 55, 102584.

[98] Silva, F., & Gomes, M. (2019). Comparative analysis of machine learning algorithms for URL-based phishing detection. Computer Science Review, 33, 100216.

[99] Smith, J. T., & Clark, D. (2021). Building secure web systems: Detecting and preventing phishing attacks. Journal of Information Assurance, 10(1), 14–29.

[100] Solanki, V., & Thakur, P. (2022). Deep learning techniques for web fraud detection. Journal of Network and Computer Applications, 187, 103124.

[101] Sun, X., & Yu, H. (2019). A machine learning approach to detecting malicious URLs. Computer Networks, 158, 145–154.

[102] Tang, H., & Liu, J. (2020). Phishing detection using natural language processing and machine learning. IEEE Internet of Things Journal, 7(6), 4909–4917.

[103] Thomas, K., & Paxson, V. (2017). Measuring and mitigating web-based social engineering. ACM Transactions on Web (TWEB), 11(3), 1–28.

[104] Tran, L., & Dinh, H. (2021). Lightweight phishing detection for mobile browsers. International Journal of Information Management, 58, 102316.

[105] Tripathy, A. K., & Patra, M. R. (2022). AI in cybersecurity: Emerging applications and future directions. Journal of Intelligent Systems, 31(1), 113–127.

[106] Upadhyay, M., & Sharma, R. (2019). Phishing detection using hybrid classifier approach. International Journal of Advanced Computer Science and Applications, 10(5), 58–65.

[107] Usman, M., & Ali, H. (2021). Implementation of phishing detection using ensemble learning. Information Security Journal: A Global Perspective, 30(1), 19–28.

[108] Vaidya, S., & Shinde, S. (2020). URL-based phishing detection using logistic regression. International Journal of Computer Applications, 176(4), 12–18.

[109] Vasudevan, R., & Gupta, P. (2021). Comparative analysis of classification models for phishing site detection. Computer and Information Science, 14(3), 31–41.

[110] Venkatesh, C., & Krishnan, P. (2019). A secure browsing model using intelligent phishing detection. ICTACT Journal on Soft Computing, 9(4), 1932–1937.

[111] Wang, W., & Zhou, Y. (2020). A survey on phishing attack detection and prevention techniques. IEEE Communications Surveys & Tutorials, 22(1), 543–568.

[112] White, C., & Silva, R. (2021). Phishing detection using convolutional neural networks. Procedia Computer Science, 185, 197–204.

[113] Wu, M., Miller, R. C., & Garfinkel, S. L. (2006). Do security toolbars actually prevent phishing attacks? Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, 601–610.

[114] Xie, Y., & Yu, S. (2021). Real-time phishing detection using deep reinforcement learning. Computers & Security, 107, 102293.

[115] Xu, X., & Zhu, J. (2020). Comparative study of SVM and random forest for phishing website classification. Journal of Computational Methods in Sciences and Engineering, 20(2), 475–486.

[116] Yan, J., & Zhang, L. (2018). Web phishing detection using URL feature analysis. Journal of Cybersecurity Technology, 2(3), 115–124.

[117] Yasin, A., & Ali, M. (2019). Phishing site prediction using support vector machines. International Journal of Advanced Computer Science and Applications, 10(7), 93–99.

[118] Yu, H., & Qi, G. (2021). Ensemble learning methods for detecting phishing websites. IEEE Transactions on Dependable and Secure Computing, 18(5), 2140–2151.

[119] Zaki, M. J., & Meira, W. (2020). Data mining and machine learning: Fundamental concepts and algorithms (2nd ed.). Cambridge University Press.

[120] Zhang, Y., & Hong, J. (2007). PhishNet: Predictive blacklisting to detect phishing attacks. Proceedings of the IEEE INFOCOM, 647–655.

@article{1723554,
      author = {Okoro Obinna},
      title = {Detecting Phishing Websites Using Machine Learning},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {3},
      pages = {3598-3673},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1723554.pdf},
      abstract = {Phishing is one of the most widespread forms of cybercrime, tricking users into divulging sensitive information through deceptive websites. Traditional methods for detecting phishing sites rely heavily on blacklists, which are often outdated. This study applies machine learning techniques to detect phishing websites more effectively. Using a dataset of 11,000 website features and labels, various machine learning algorithms—including Decision Tree, Random Forest, and Support Vector Machine—were trained and evaluated. A structured questionnaire was distributed to 350 respondents to assess awareness and experiences related to phishing. The research achieved an accuracy of 97.1% using the Random Forest model. The survey findings provided supporting evidence on user awareness and exposure to phishing threats. The results suggest that machine learning models are capable of identifying phishing sites with high precision and could be integrated into modern web browsers and security tools.},
      keywords = {Phishing, Machine Learning, Cybersecurity, Website Detection, Classification Algorithms},
      month = {September},
      doi = {https://doi.org/10.64388/IREV10I3-1723554}
  }