From feature engineering and topics models to enhanced prediction rates in phishing detection

Registro completo de metadados
MetadadosDescriçãoIdioma
Autor(es): dc.creatorGualberto, Éder Souza-
Autor(es): dc.creatorSouza Júnior, Rafael Timóteo de-
Autor(es): dc.creatorVieira, Thiago Pereira de Brito-
Autor(es): dc.creatorCosta, João Paulo Carvalho Lustosa da-
Autor(es): dc.creatorDuque, Cláudio Gottschalg-
Data de aceite: dc.date.accessioned2024-07-22T11:44:59Z-
Data de disponibilização: dc.date.available2024-07-22T11:44:59Z-
Data de envio: dc.date.issued2021-10-13-
Data de envio: dc.date.issued2021-10-13-
Data de envio: dc.date.issued2021-04-21-
Fonte completa do material: dc.identifierhttps://repositorio.unb.br/handle/10482/42130-
Fonte completa do material: dc.identifierhttps://orcid.org/ 0000-0002-2917-3605-
Fonte completa do material: dc.identifierhttps://orcid.org/ 0000-0003-1101-3029-
Fonte completa do material: dc.identifierhttps://orcid.org/ 0000-0003-0512-374X-
Fonte completa do material: dc.identifierhttps://orcid.org/ 0000-0002-8616-4924-
Fonte completa do material: dc.identifierhttps://orcid.org/ 0000-0003-3558-466X-
Fonte: dc.identifier.urihttp://educapes.capes.gov.br/handle/capes/787825-
Descrição: dc.descriptionPhishing is a type of fraud attempt in which the attacker, usually by e-mail, pretends to be a trusted person or entity in order to obtain sensitive information from a target. Most recent phishing detection researches have focused on obtaining highly distinctive features from the metadata and text of these e-mails. The obtained attributes are then used to feed classification algorithms in order to determine whether they are phishing or legitimate messages. In this paper, it is proposed an approach based on machine learning to detect phishing e-mail attacks. The methods that compose this approach are performed through a feature engineering process based on natural language processing, lemmatization, topics modeling, improved learning techniques for resampling and cross-validation, and hyperparameters configuration. The first proposed method uses all the features obtained from the Document-Term Matrix (DTM) in the classification algorithms. The second one uses Latent Dirichlet Allocation (LDA) as a operation to deal with the problems of the “curse of dimensionality”, the sparsity, and the text context portion included in the obtained representation. The proposed approach reached marks with an F1-measure of 99.95% success rate using the XGBoost algorithm. It outperforms state-of-the-art phishing detection researches for an accredited data set, in applications based only on the body of the e-mails, without using other e-mail features such as its header, IP information or number of links in the text.-
Formato: dc.formatapplication/pdf-
Publicador: dc.publisherIEEE-
Direitos: dc.rightsAcesso Aberto-
Direitos: dc.rightsThis work is licensed under a Creative Commons Attribution 4.0 License. For more information, see https://creativecommons.org/licenses/by/4.0/-
Palavras-chave: dc.subjectCrime por computador-
Palavras-chave: dc.subjectExtração de recursos-
Palavras-chave: dc.subjectAprendizado do computador-
Palavras-chave: dc.subjectInteligência artificial-
Palavras-chave: dc.subjectProcessamento de linguagem natural (Computação)-
Palavras-chave: dc.subjectCorreio eletrônico-
Título: dc.titleFrom feature engineering and topics models to enhanced prediction rates in phishing detection-
Aparece nas coleções:Repositório Institucional – UNB

Não existem arquivos associados a este item.