A multi-tier phishing detection and filtering approach

Journal of Network and Computer Applications

Volumn 36, Issue 1, 2013, Pages 324-335

  Islam, Rafiqul ^a   Abawajy, Jemal ^b  

^a CHARLES STURT UNIVERSITY   (Australia)

^b DEAKIN UNIVERSITY   (Australia)

Author keywords

Analyser; Machine learning; Multi tier classifier; Phishing

Indexed keywords

ANALYSER; CLASSIFICATION ALGORITHM; CLASSIFICATION MODELS; CLASSIFICATION PROCESS; CLASSIFIER ALGORITHMS; EMAIL FILTERING; EMPIRICAL PERFORMANCE; FALSE POSITIVE; GLOBAL SECURITY; INNOVATIVE METHOD; LOWER COMPLEXITY; MULTI-TIER; PHISHING; PHISHING ATTACKS; PHISHING DETECTIONS;

ALGORITHMS; ELECTRONIC MAIL; LEARNING SYSTEMS;

COMPUTER CRIME;

EID: 84870666662     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2012.05.009     Document Type: Article

References (52)

1. Anti Phishing Work Group. Phishing attacks trends report. [Online] Available: 〈http://www.antiphishing.org〉 Dec. 2007.
2. Abu-Nimeh, S, Nappa, D, Wang, S, and Nair, S. A comparison of machine learning techniques for phishing detection, In: e-crime 07: Proceedings of the anti phishing working groups 2nd annual e-crime researchers summit, pp. 60-69, New York, NY, USA,2006.ACM.
3. B. André, J. Beer, G. Sebastian, Marie Moens, P. Gerhard, and S. Siehyun New filtering approaches for phishing email Journal of Computer Security - EU-Funded ICT Research on Trust and Security 18 1 2010
4. ©2007
5. A. Al-Momani, W. Tat-Chee, K. Al-Saedi, A. Altaher, S. Ramadass, and A. Manasrah An online model on evolving phishing e-mail detection and classification method Journal of Applied Sciences 11 18 2011 3301 3307
6. Bergholz A, Chang J, Paass G, Reichartz F, Strobel S. Improved phishing detection using model based features, In: Fifth conference for e-mail and Anti spam, CEAS 2008.
7. Beck K, Zhan J. 2010. Phishing using a modified Bayesian technique. 2010 IEEE second international conference on social computing (SocialCom), pp. 649-655.
8. W. Cohen, and Y. Singer Context-sensitive learning methods for text categorization ACM Transactions on Information Systems 17 2 1999 141 173
9. N. Cristianini, and J. Shawe-Taylor An introduction to Support Vector Machines and Other Kernel-Based Learning Methods 2000 Cambridge University Press
10. Crain J, Opyrchal L, Prakash A. (2010) Fighting phishing with trusted email, international conference on availability, reliability, and security, 2010. ARES '10, Page(s): 462-467.
11. W. Drucker, B. Shahrary, and D Gibbon Support vector machines: relevance feedback and information retrieval Information Processing and Management 38 3 2003 305 323
12. E.R. DeLong, D.M. DeLong, and D.L. Clark-Pearson Comparing the areas under two or more correlated receiver operating characteristic curves: a non-parametric approach Biometrics 44 1988 837 845
13. Fette I, Sadeh N, Tomasic A. Learning to detect phishing emails, In: Proceedings of the 16th international world wide web conference (WWW 2007), May 2007.
14. Anthony Y. Fu, Liu Wenyin, and Xiaotie Deng Detecting phishing web pages with visual similarity assessment based on earth mover's distance (EMD) IEEE Transactions on Dependable and Secure Computing 3 4 2006 301 311
15. ©2007Proceedings of the 16th international conference on World Wide Web
16. L. Huan, and Y. Lei Toward integrating feature selection Algorithms for Classification and Clustering IEEE Transaction on Knowledge and Data Engg 17 4 2005
17. Hamid IRA, Abawajy J. (2011) Phishing email feature selection approach, 2011 IEEE 10th international conference on trust, security and privacy in computing and communications (TrustCom), pp. 916-921.
18. Huang Huajun, Tan Junshan, Liu Lingxi (2009) Countermeasure techniques for deceptive phishing attack, international conference on new trends in information and service science, 2009. NISS '09, pp. 636-641.
19. Zhang Haijun, Liu Gang, T.W.S. Chow, and Liu Wenyin Textual and visual content-based anti-phishing: a Bayesian approach IEEE Transactions on Neural Networks 22 10 2011 1532 1546
20. Mingxing. He, Shi-Jinn. Horng, Pingzhi. Fan, Mohammad. Khurram Khan, Ray-Shine. Run, and Jui-Lin. lai An efficient phishing webpage detector Expert Systems with Applications 38 10 2011 12018 12027
21. M. Islam, and W. Zhou Architecture of adaptive spam filtering based on machine learning algorithms 2007 Springer-Verlag ICA3PP 2007, LNCS 4494, pp. 458-46
22. Islam M, Zhou W. Email classification using multi-tier classification algorithms, IEEE/ICIS08, USA 2008.
23. M. Islam, W. Zhou, Y. Xiang, and M. Gao An innovative analyser for multi-ML algorithm email classification based on grey list analysis Journal of Network and Computer Applications 2009
24. H. Kaitarai Filtering junk e-mail: a performance comparison between genetic programming and naïve bayes, Technical report, 1999 Department of Electrical and Computer Engineering, University of Waterloo
25. E. Kirda, and C. Kruegel Protecting users against phishing attacks The Computer Journal 49 5 2006 554 561
26. C. Kruegel, G. Vigna, and W. Robertson A multi-model approach to the detection of web-based attacks Computer Networks 48 5 2005 717 738 July
27. H. Kim, and J.H. Huh Detecting DNS-poisoning-based phishing attacks from their network performance characteristics IEEE Electronics Letters Volume 47 11 2011 656 658
28. Ludl C, McAllister S, Kirda E, Kruegel C. On the effectiveness of techniques to detect phishing sites, In: Proceedings of detection of intrusions and malware and vulnerability assessment (DIMVA) 2007.
29. Liping Ma, Ofoghi, B, Watters, P, Brown, S. (2009) Detecting phishing emails using hybrid features, Symposia and workshops on ubiquitous, autonomic and trusted computing, 2009. UIC-ATC '09. pp. 493-497
30. ©2009 Workshop on CyberSecurity and Intelligence Informatics
31. T.M. Mitchell Machine Learning 1997
32. ©2009
33. Microsoft. Anti-phishing white paper. Technical report, Microsoft, 2005.
34. Mozilla. Phishing protection, 2007. 〈http://www.mozilla.com/en-US/ firefox/phishing-protection/〉.
35. Moore T, Clayton R. Examining the impact of website take-down on phishing, In: eCrime 07: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit, pp. 1-13, New York, NY, USA, 2007. ACM.
36. S.W. Neville, and M. Horie Controlling spam and spear phishing via peered network overlays and non-repudiable traceback eCrime Researchers Summit (eCrime) 2011 1 13
37. Netcraft, 2007. 〈http://toolbar.netcraft.com/〉.
38. Phishing activity trends report Anti-phishing working group, technical report, Jan. 2005. [Online]. Available: 〈http://www.Antiphishing.org/ reports/apwgreportjan2006.pdf〉.
39. Phishingcorpus homepage Apr. 2006. [Online]. Available: 〈http://monkey.org/%7Ejose/wiki/doku〉.
40. J. Quinlan Induction of decision trees Machine Learning 1 1986 81 106
41. J. Quinlan Improved use of continuous attributes in c4.5 Artificial Intelligence Research 4 1996 77 90
42. Ross B, Jackson C, Miyake N, Boneh D., Mitchell, J. A browser plug-in solution to the unique password problem, Proceedings of the 14th usenix security symposium, 〈http://crypto.stanford.edu/PwdHash/〉, 2005.
43. Sahami M, Dumais S, Heckerman D, Horvitz E. A Bayesian approach to filtering junk e-mail, In: learning for text categorization: papers from the workshop, Madison, Wisconsin, AAAI technical report WS-98-05, 1998.
44. Spamassassin public corpus 2006. [Online].Available: 〈http:// spamassassin.apache.org/publiccorpus/php? id=PhishingCorpus〉.
45. Shahriar H, Zulkernine M. (2011) Information source-based classification of automatic phishing website detectors, IEEE/IPSJ 11th international symposium on applications and the internet (SAINT), 2011, pp. 190-195
46. F. Toolan, and J. Carthy Phishing detection using classifier ensembles, eCrime Researchers Summit, 2009 eCRIME '09 2009 1 9
47. Toolan F, Carthy J. (2010) Feature selection for spam and phishing detection eCrime researchers summit (eCrime), 2010 pp. 1-12
48. A. Vishwanath, T. Herath, R. Chen, J.H. Wang, and R. Rao Testing individual differences in phishing vulnerability within an integrated, information processing model Decision Support Systems 51 3 2011 576 586
49. L. Wenyin, G. Huang, L. Xiaoyue, Z. Min, and X. Deng Detection of phishing webpages based on visual similarity Procceeding of WWW 05 2005 1060 1061
50. I. Witten, and E. Frank Data mining: practical machine learning tools and techniques 2005 Morgan Kaufmann
51. Yu WD, Nargundkar S, Tiruthani N. (2009) PhishCatch - a phishing detection tool, 33rd annual IEEE international computer software and applications conference, 2009. COMPSAC '09. Vol. 2. pp. 451-456.
52. Zhang J, Jin R, Yang Y, Hauptmann A. Modified logistic regression: an approximation to SVM and its applications in large-scale text categorization, In: Proceedings of the 20th international conference on machine learning. AAAI Press, pp. 888-895,2003.