Understanding Phishing: Techniques, Detection, and Mitigation Strategies
1Shivam Gupta, 2Vanika Rattan
Department of Computer Applications
Chandigarh School of Business, Jhanjeri, Mohali
Chandigarh Group of Colleges, Jhanjeri, Mohali
1avansh235@gmail.com
2vanika.rattan@gmail.com
Abstract—This research paper dwells in the many-sided domain of phishing and aims to provide a comprehensive view of its various dimensions. This starts from delineating the common methods of phishers such as email, SMS and voice and social engineering-based methods among others this paper tries to show how attackers leverage human psychology and technological flaws for their malicious ends. Additionally, it describes up-to-date tactics such spear-phishing email scams whaling in addition pharming that emphasize flexibility and innovativeness of malicious actors who try to elude common security mess. Effective detection mechanisms are one line of defence against these malevolent endeavours other than mere understanding of phishing techniques. This paper considers rule-based algorithms machine learning techniques anomaly detection behavioural analysis etc so as to select ones with most advantages disadvantages suitability for real-life conditions due to specific feats inherent in them. Besides detecting advanced obfuscation techniques and exploiting cognitive biases during attacks which are harder for prevention systems to identify compared simple ones because they are more complex this examination emphasizes continual enhancement of detecting tools. Detection is important but mitigation strategies are equally necessary when drumming against phishing assaults for building up digital resilience. This study examines different types of mitigation ranging from user education programs through e-mail filtering technologies, authentication proceeds involving website blacklisting up until incident response frameworks (Kruger etal., 2015). In conclusion this study offers practical recommendations on how to mitigate phishing risks and reduce their negative impact on people and organizations.
Keywords—Phishing, Cybersecurity, Attack Techniques, Detection Mechanisms, Mitigation Strategies
