A Novel Phishing Website Detection Approach Using Machine Learning

A Novel Phishing Website Detection Approach Using Machine Learning

Prof. Tanvi P. Deshmukh, Ankit Sharma, Akshay Pawar, Rahul Gaigawale, Suyog Late

Information Technology Sandip Foundation, SITRC, Nashik

Abstract——Phishing attackers spread phishing links through email, text messages, and social media platforms. They use social engineering skills to trick users into visiting phishing websites and entering crucial personal information. In the end, the stolen personal information is used to defraud the trust of regular websites or financial institutions to obtain illegal benefits. With the development and applications of machine learning technology, many machine learning-based solutions for detecting phishing have been proposed. Some solutions are based on the features extracted by rules, and some of the features need to rely on third party services, which will cause instability and time-consuming issues in the prediction service. In this project, we propose a machine learning-based framework for detecting phishing websites. We have implemented the framework as a browser plug-in capable of determining whether there is a phishing risk in real-time when the user visits a web page and gives a warning message. The real-time prediction service combines multiple strategies to improve accuracy, reduce false alarm rates, and reduce calculation time, including whitelist filtering, blacklist interception, and machine learning (ML) prediction. In the ML prediction module, we compared multiple machine learning models using several datasets.

Index Terms—Phishing, Personal information, Machine Learn- ing, Malicious links, Phishing domain characteristics, Phishing attacks, legitimate, trust worthy