A hybrid approach for phishing web site detection.
Purpose This paper aims to present a hybrid approach based on classification algorithms that was capable of identifying different types of phishing pages. In this approach, after eliminating features that do not play an important role in identifying phishing attacks and also after adding the techniq...
| Publicado en: | Electronic Library Vol. 34; no. 6; pp. 927 - 945 |
|---|---|
| Autores principales: | , , |
| Formato: | tables/charts Journal Article |
| Publicado: |
Emerald Publishing Limited
2016
|
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=ccm&AN=120096129&site=ehost-live header: @attributes: shortDbName: ccm uiTerm: 120096129 longDbName: CINAHL Complete uiTag: AN controlInfo: bkinfo: dissinfo: jinfo: jid: 02640473 2OJ jtl: Electronic Library issn: 02640473 maglogo: N pubinfo: dt: 2016 vid: 34 iid: 6 pid: 465 pub: Emerald Publishing Limited artinfo: ui: 120096129 120096129 120096129 10.1108/EL-07-2015-0132 120096129 ppf: 927 ppct: 18 formats: tig: atl: A hybrid approach for phishing web site detection. aug: au: Dadkhah, Mehdi Shamshirband, Shahaboddin Abdul Wahab, Ainuddin Wahid affil: Department of Computer and Information Technology, Foulad Institute of Technology, Isfahan, Iran sug: subj: Deception Classification World Wide Web Algorithms Information Resources Electronic Journals ab: Purpose This paper aims to present a hybrid approach based on classification algorithms that was capable of identifying different types of phishing pages. In this approach, after eliminating features that do not play an important role in identifying phishing attacks and also after adding the technique of searching page title in the search engine, the capability of identifying journal phishing and phishing pages embedded in legal sites was added to the presented approach in this paper.Design/methodology/approach The hybrid approach of this paper for identifying phishing web sites is presented. This approach consists of four basic sections. The action of identifying phishing web sites and journal phishing attacks is performed via selecting two classification algorithms separately. To identify phishing attacks embedded in legal web sites also the method of page title searching is used and then the result is returned. To facilitate identifying phishing pages the black list approach is used along with the proposed approach so that the operation of identifying phishing web sites can be performed more accurately, and, finally, by using a decision table, it is judged that the intended web site is phishing or legal.Findings In this paper, a hybrid approach based on classification algorithms to identify phishing web sites is presented that has the ability to identify a new type of phishing attack known as journal phishing. The presented approach considers the most used features and adds new features to identify these attacks and to eliminate unused features in the identifying process of these attacks, does not have the problems of previous techniques and can identify journal phishing too.Originality/value The major advantage of this technique was considering all of the possible and effective features in identifying phishing attacks and eliminating unused features of previous techniques; also, this technique in comparison with other similar techniques has the ability of identifying journal phishing attacks and phishing pages embedded in legal sites. pubtype: Academic Journal doctype: tables/charts Journal Article ougenre: Article language: English refInfo: holdings: @attributes: islocal: N |
|---|