Improving phishing email detection performance through deep learning with adaptive optimization

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F04274644%3A_____%2F25%3A%230001276" target="_blank" >RIV/04274644:_____/25:#0001276 - isvavai.cz</a>

Result on the web

<a href="https://www.nature.com/articles/s41598-025-20668-5" target="_blank" >https://www.nature.com/articles/s41598-025-20668-5</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1038/s41598-025-20668-5" target="_blank" >10.1038/s41598-025-20668-5</a>

Result language

angličtina

Original language name

Improving phishing email detection performance through deep learning with adaptive optimization

Original language description

Phishing email attacks are becoming increasingly sophisticated, placing a heavy burden on cybersecurity, which requires more advanced detection techniques. Attackers often craft emails that closely resemble those from trusted sources, making it difficult for users and traditional filters to distinguish between legitimate and malicious messages. This paper introduces a new hybrid deep learning and optimizer architecture for detecting phishing emails based on the Mountain Gazelle Optimizer (MGO). A hybrid architecture is proposed, comprising contextual embedding using Bidirectional Encoder Representations from Transformers (BERT), feature extraction with Convolutional Neural Network (CNN), Gated Recurrent Unit (GRU) temporal dependencies, and multi-head attention for refining the key feature focus in email text. The dataset used in this paper for phishing detection is obtained from the Kaggle website, which includes phishing and legitimate emails. Hyperparameter optimization with the MGO results in a robust model with good classification accuracy. Our experiments demonstrate improved accuracy, precision, recall, and F1 score, with values of 96.8%, 97.2%, 95.4%, and 96.3%, respectively, for enhanced phishing email detection compared to baseline models. Also, the model reduces false positives by 2.5% compared to state-of-the-art conventional methods. These results demonstrate the effectiveness of transformer-based embeddings, combined with advanced neural networks and optimization techniques, in mitigating phishing threats.

Czech name

—

Czech description

—

Type

J_imp - Article in a specialist periodical, which is included in the Web of Science database

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

—

Continuities

I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Publication year

2025

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Name of the periodical

Scientific Reports

ISSN

2045-2322

e-ISSN

—

Volume of the periodical

15

Issue of the periodical within the volume

36724

Country of publishing house

DE - GERMANY

Number of pages

16

Pages from-to

1-16

UT code for WoS article

001598250200028

EID of the result in the Scopus database

2-s2.0-105019347761