Abstract
Phishing attacks are security attacks that affect individuals and organisations websites. I addition, it may also devices and networks such as Internet of Things (IoT) devices and networks. IoT networks are exposed environment for phishing attacks. Thingbots software in IoT devices can be utilized by attackers for spreading hidden and unnoticed spam emails. Several approaches such as machine learning, deep learning and others were used to create and design detection methods for phishing attacks. However, these methods detection accuracy still not enough and need to be enhanced. Anew proposed method for phishing website detection that based on optimized ensemble classification method is suggested in the present study. in this proposed method, A Genetic Algorithm (GA) was used to optimize the ensemble classification method by tuning the parameters of several ensemble machine learning methods, including Bagging, GradientBoost, and LightGBM. These were accomplished by ranking the optimized classifiers to pick out the best three models as base classifiers of a stacking ensemble method. A dataset of websites that made up of 44% phishing websites (4898) and 5\% legitimate websites (6157) was used for the present study experiments. As a come out, with the proposed detection method, detection accuracy was enhanced and reached 97.16%.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Gupta, B.B., Arachchilage, N.A.G., Psannis, K.E.: Defending against phishing attacks: taxonomy of methods, current issues and future directions. Telecommun. Syst. 67(2), 247–267 (2017). https://doi.org/10.1007/s11235-017-0334-z
Gubbi, J., Buyya, R., Marusic, S., Palaniswami, M.: Internet of Things (IoT): a vision, architectural elements, and future directions. Futur. Gener. Comput. Syst. 29(7), 1645–1660 (2018)
Roman, R., Najera, P., Lopez, J.: Securing the Internet of Things. Computer 44(9), 51–58 (2011)
Tang, D.: Event detection in sensor networks. The George Washington University, School of Engineering and Applied Sciences, USA (2009)
Wei, B., Hamad, R.A., Yang, L., He, X., Wang, H., et al.: A deep-learning-driven light-weight phishing detection sensor. Sensors 19(19), 1–13 (2019)
Somesha, M., Pais, A.R., Rao, R.S., Rathour, V.S.: Efficient deep learning techniques for the detection of phishing websites. Sādhanā 45(1), 1–18 (2020). https://doi.org/10.1007/s12046-020-01392-4
Ali, W., Ahmed, A.A.: Hybrid intelligent phishing website prediction using deep neural networks with genetic algorithm-based feature selection and weighting. IET Inf. Secur. 13(6), 659–669 (2019)
Chiew, K.L., Tan, C.L., Wong, K., Yong, K.S., Tiong, W.K.: A new hybrid ensemble feature selection framework for machine learning-based phishing detection system. Inf. Sci. 484, 153–166 (2019)
Rao, R.S., Pais, A.R.: Detection of phishing websites using an efficient feature-based machine learning framework. Neural Comput. Appl. 31(8), 3851–3873 (2018). https://doi.org/10.1007/s00521-017-3305-0
Ali, W., Malebary, S.: Particle swarm optimization-based feature weighting for improving intelligent phishing website detection. IEEE Access 8, 116766–116780 (2020)
Khursheeed, F., Sami-Ud-Din, M., Sumra, I.A., Safder, M.A.: Review of security mechanism in Internet of Things (IoT). In: IEEE 3rd International Conference on Advancements in Computational Sciences (ICACS), Lahore, Pakistan, pp. 1–9 (2020)
Tsiknas, K., Taketzis, D., Demertzis, K., Skianis, C.: Cyber threats to industrial IoT: a survey on attacks and countermeasures. IoT 2(1), 163–218 (2021)
Parra, G.D., Rad, P., Choo, K.K., Beebe, N.: Detecting Internet of Things attacks using distributed deep learning. J. Netw. Comput. Appl. 163(102662), 1–20 (2020)
Mao, J., et al.: Phishing page detection via learning classifiers from page layout feature. EURASIP J. Wirel. Commun. Netw. 2019(1), 1–14 (2019). https://doi.org/10.1186/s13638-019-1361-0
Virat, M.S., Bindu, S.M., Aishwarya, B., Dhanush, B.N., Kounte, M.R.: Security and privacy challenges in Internet of Things. In: IEEE 2nd International Conference on Trends in Electronics and Informatics (ICOEI), Tirunelveli, India, pp. 454–460 (2018)
Deogirikar, J., Vidhate, A.: Security attacks in IoT: a survey. In: IEEE International Conference on IoT in Social, Mobile, Analytics and Cloud (I-SMAC), Palladam, India, pp. 32–37 (2017)
Alsariera, Y.A., Adeyemo, V.E., Balogun, A.O., Alazzawi, A.K.: AI meta-learners and extra-trees algorithm for the detection of phishing websites. IEEE Access 8, 142532–142542 (2020)
Jain, A.K., Gupta, B.B.: A machine learning based approach for phishing detection using hyperlinks information. J. Ambient. Intell. Humaniz. Comput. 10(5), 2015–2028 (2018). https://doi.org/10.1007/s12652-018-0798-z
Feng, F., Zhou, Q., Shen, Z., Yang, X., Han, L., et al.: The application of a novel neural network in the detection of phishing websites. J. Ambient Intell. Humaniz. Comput. 1–15 (2018).https://doi.org/10.1007/s12652-018-0786-3
Aburub, F., Hadi, W.: A new association classification based method for detecting phishing websites. J. Theor. Appl. Inf. Technol. 99(1), 147–158 (2021)
Gandotra, E., Gupta, D.: An efficient approach for phishing detection using machine learning. In: Giri, K.J., Parah, S.A., Bashir, R., Muhammad, K. (eds.) Multimedia Security. AIS, pp. 239–253. Springer, Singapore (2021). https://doi.org/10.1007/978-981-15-8711-5_12
Shabudin, S., Sani, N.S., Ariffin, K.A., Aliff, M.: Feature selection for phishing website classification. Int. J. Adv. Comput. Sci. Appl. 11(4), 587–595 (2020)
Subasi, A., Molah, E., Almkallawi, F., Chaudhery, T.J.: Intelligent phishing website detection using random forest classifier. In: IEEE International Conference on Electrical and Computing Technologies and Applications (ICECTA), Ras Al Khaimah, UAE, pp. 1–5 (2017)
Yu, X.: Phishing websites detection based on hybrid model of deep belief network and support vector machine. IOP Conf. Ser. Earth Environ. Sci. 602(1), 1–9 (2020)
Patil, D.R., Patil, J.B.: Malicious web pages’ detection using feature selection techniques and machine learning. Int. J. High Perform. Comput. Netw. 14(4), 473–488 (2019)
PhishTank, Developer information. http://phishtank.org/developer_info.php. Accessed 28 Feb 2021
Dua, D., Graff, C.: UCI machine learning repository. School of Information and Computer Science, University of California, Irvine, CA, USA. https://archive.ics.uci.edu/ml/datasets/Phishing+Websites. Accessed 10 Jan 2021
Jiang, Y., Tong, G., Yin, H., Xiong, N.: A pedestrian detection method based on genetic algorithm for optimize XGBoost training parameters. IEEE Access 7, 118310–118321 (2019)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Al-Mekhlafi, Z.G., Mohammed, B.A. (2021). Using Genetic Algorithms to Optimized Stacking Ensemble Model for Phishing Websites Detection. In: Abdullah, N., Manickam, S., Anbar, M. (eds) Advances in Cyber Security. ACeS 2021. Communications in Computer and Information Science, vol 1487. Springer, Singapore. https://doi.org/10.1007/978-981-16-8059-5_27
Download citation
DOI: https://doi.org/10.1007/978-981-16-8059-5_27
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-16-8058-8
Online ISBN: 978-981-16-8059-5
eBook Packages: Computer ScienceComputer Science (R0)